Senior Security Engineer, Oscar Health

• 5+ years of experience assessing Web Applications, Cloud Environments, Mobile Applications and Network security
• Ability to simplify complex security issues into actionable steps for remediation or risk mitigation
• Knowledge of industry recognized methodologies and frameworks for security testing (OWASP, OSSTM, PTES)
• Experience testing web applications for security vulnerabilities
• Experience testing mobile applications for security vulnerabilities
• Experience assessing cloud environment for misconfigurations and security vulnerabilities
• Experience testing networks for security vulnerabilities
• Working familiarity with AWS and GCP
• Experience using containers and container orchestration technology (Mesos and Kubernetes)

Desirable

• Partner with cross-functional teams to identify, mitigate, and resolve security issues within Oscar’s tech stack (Web Applications, Mobile Apps, Network, Cloud)
• Perform and document technical testing based on industry recognized standards (OWASP) and best practices to identify security vulnerabilities against Oscar owned assets (website, mobile applications, networks and cloud environments), including:
• Threat Modeling
• Architecture/Design Reviews
• Application and Cloud Security Testing (Red Teaming)
• Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks
• Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused
• Collaborate with Security Leadership regarding technical vulnerabilities and potential impact if exploited
• Collaborate with non-technical teams to propose control and process enhancements to mitigate technical risk
• Stay up-to-date with current security trends, advisories, publications and relevant research for the organization
• Define hardening and secure design standards and use them to perform application security reviews in partnership with developer teams