Drive the vulnerability management lifecycle from automated SAST/DAST identification through manual analysis and remediation tracking.
Serve as a technical resource and mentor to junior engineers.
Conduct source code reviews of internal and third-party software.
Write production-quality code and libraries for engineering teams.
Build risk assessment frameworks and deliver actionable risk-management plans.
Partner with engineering teams to remediate or migrate vulnerabilities.
Deliver in-depth software security presentations to engineering teams.
Help architect, build, test, and deploy application security systems and processes.
Design security measures for AI-driven workflows, including security reviews for AI agent processes.
Comply with applicable laws and regulations and perform other assigned duties.
Requirements
4+ years of combined career experience in software development and information security.
Proven experience across all areas of the Secure Software Development Life Cycle.
Strong experience building moderate-to-complex standalone systems or major new features.
Hands-on experience using AI models and integrating them with internal systems through protocols such as the Model Context Protocol.
A bachelor’s degree or four years of equivalent experience is a bonus qualification.
Experience in or knowledge of healthcare or health insurance security challenges is a bonus qualification.
Benefits
Hybrid schedule in the Los Angeles office with 3 days of in-office work per week, including Thursdays; the other two office days are flexible.
Full-time employee benefits include medical, dental, and vision coverage, 11 paid holidays, paid sick time, paid parental leave, 401(k) participation, life and disability insurance, and paid wellness time and reimbursements.
Unlimited vacation program, company equity grants, and annual performance bonuses are available.
Salary: $163k - $215k/yr
Oscar Health
Oscar Health is a leading healthcare technology company, whose mission is to make a healthier life accessible and affordable for all.