Senior Security Engineer, Detection & Response
Remote
Applications have closed
Oscar
Oscar offers health insurance plans for individuals and families, and small businesses. Find a plan that's right for you.Hi, we're Oscar. We’re hiring a Senior Security Engineer, Detection & Response to join our Security team.
Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.
About the role:
As a Senior Security Engineer, Detection & Response, you will help secure Oscar’s cloud implementations. You will provide your expertise and experience to ensure Oscar meets regulatory requirements and industry good practices. You will work with other Security team members and partner with Engineering, IT, and SRE to prioritize and close control gaps and reduce enterprise risk and be a subject matter expert providing guidance around architecting new applications and processes in the cloud.
You will report to the Manager of Detection and Response. This is a remote / work-from-home role. You must reside in one of the following states: Arizona, California, Colorado, Connecticut, Florida, Georgia, Illinois, Iowa, Maryland, Massachusetts, Michigan, New Hampshire, New Jersey, New Mexico, New York, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, Tennessee, Texas, Utah, Virginia, Washington, or Washington, D.C. Note, this list of states is subject to change. #LI-Remote
The base pay for this role is: $156,560 - $205,485 per year. You are also eligible for employee benefits, company equity grants and annual performance bonuses.
Responsibilities:
- Support the overall improvement of the security process and documentation
- Stay informed of new technologies or application methodologies through publications, membership in professional organizations and contact with other IT organizations and institutions
- Participate in the design and day-to-day administration of security systems that reflect state-of-the-art security best practices and compliance, ensuring a focus on balancing security effectiveness without introducing material operational friction
- Work with cross-functional teams to identify, resolve, and mitigate security issues in Oscar’s cloud environments and processes
- Assist with implementing and administering security controls for cloud environments
- Assist Engineering teams with identifying security requirements for cloud applications
- Excellent time management and prioritization skills with a strong ability to plan, prioritize, and execute projects independently or in coordination with other teams
- Help create metrics to demonstrate the effectiveness of our application security program and inform continuous program improvements
- Create, update, and maintain documentation for all configurations for the production environment
- Encourage a culture of collaboration with a focus on automation, maintainability, and security.
- Secure development life-cycle (SDLC) practices including threat modeling and security testing
Qualifications:
- 5+ years of career experience related to security cloud architecture and design
- Experience with database data access/management including SQL and BigQuery
- Experience writing scripts with JavaScript, Go, Python or Java
- Experience implementing modern cloud infrastructure services in AWS or GCP
- Experience using containers and container orchestration technology (Mesos and Kubernetes)
- Experience with Terraform, ArgoCD
This is an authentic Oscar Health job opportunity. Learn more about how you can safeguard yourself from recruitment fraud here.
At Oscar, being an Equal Opportunity Employer means more than upholding discrimination-free hiring practices. It means that we cultivate an environment where people can be their most authentic selves and find both belonging and support. We're on a mission to change health care -- an experience made whole by our unique backgrounds and perspectives..
Pay Transparency:
Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education, and experience.
Full-time employees are eligible for benefits including: medical, dental, and vision benefits, paid holidays, paid vacation and sick time, paid parental leave, 401(k) plan participation, life and disability insurance, and paid wellness time and reimbursements.
Reasonable Accommodation:
Oscar applicants are considered solely based on their qualifications, without regard to applicant’s disability or need for accommodation. Any Oscar applicant who requires reasonable accommodations during the application process should contact the Oscar Benefits Team (accommodations@hioscar.com) to make the need for an accommodation known.
To protect the health and safety of our employees, we require any employee conducting in-person work* to be fully vaccinated against COVID-19 by their start date. If you are unable to be vaccinated due to medical or protected religious reasons, please reach out to our Benefits team at accommodations@hioscar.com to submit an accommodations request.
*Note: In-person work includes: employees required to work from our offices, employees conducting sales work in the field and employees conducting at-home or in-person visits with members.
Tags: Application security Automation AWS C Cloud Compliance Full stack GCP Java JavaScript Kubernetes Python SDLC SQL Terraform
Perks/benefits: Career development Equity Health care Insurance Medical leave Parental leave Salary bonus Startup environment Transparency
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Manager Pentest H/F jobs
- Open Information Security Specialist jobs
- Open Senior Security Analyst jobs
- Open Security Operations Engineer jobs
- Open Cyber Security Architect jobs
- Open Senior Cyber Security Engineer jobs
- Open Product Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cyber Security Specialist jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Cybersecurity Analyst jobs
- Open Principal Security Engineer jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Senior Information Security Engineer jobs
- Open Cybersecurity Specialist jobs
- Open IT Security Analyst jobs
- Open Chief Information Security Officer jobs
- Open Security Researcher jobs
- Open Security Specialist jobs
- Open Senior Penetration Tester jobs
- Open Senior Security Architect jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open IT Security Engineer jobs
- Open Senior Cyber Security Specialist jobs
- Open Agile-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open CISM-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open Analytics-related jobs
- Open IAM-related jobs
- Open SaaS-related jobs
- Open Threat intelligence-related jobs
- Open CISA-related jobs
- Open Security assessment-related jobs
- Open DevOps-related jobs
- Open Java-related jobs
- Open Kubernetes-related jobs
- Open Security Clearance-related jobs
- Open EDR-related jobs
- Open Malware-related jobs
- Open IDS-related jobs
- Open CEH-related jobs
- Open APIs-related jobs
- Open CI/CD-related jobs