Senior Product Security Engineer

Join Oscar, a health insurance company, as a Senior Product Security Engineer. In this role, you will lead the security of the software development life cycle, work on AI integration and security, drive the vulnerability management lifecycle, provide technical mentorship, conduct code reviews, build risk assessment frameworks, and ensure compliance with laws and regulations. You should have 4+ years of experience in software development and information security, a strong background in building complex systems, hands-on experience with AI models, and a bachelor's degree or equivalent experience. Prior experience in the healthcare or health insurance industries is a plus.

• Lead the security of the software development life cycle (SDLC) from design to completion, ensuring that development remains fast and secure.
• Drive the vulnerability management lifecycle, from automated identification to complex manual analysis and remediation tracking.
• Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
• 4+ years of combined career experience in software development and information security
• Strong background in building moderate to complex standalone systems or major new features
• Hands-on experience using AI models and integrating them with internal systems via protocols like the Model Context Protocol (MCP)
• Proven experience across all areas of the Secure Software Development Life Cycle
• Bachelors degree or four years of equivalent experience
• Prior work experience in or understanding of security challenges specific to the healthcare or health insurance industries