Senior Security Engineer, Operations

Hi, we're Oscar. We're hiring a Senior Security Engineer, Operations to join our Security team.

Oscar is the first health insurance company built around a full stack technology platform and a focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.

About the role

You will take our newly implemented SIEM and quickly bringing the alert ecosystem on line, from alert quality and tuning to developing playbooks and escalation plans. We need someone who understands how to take the data streams we have available and leverage them to create high fidelity, high accuracy alerts. You will also bring experience of incident management and processes, mentor the team, and up-level the department.

You will report to the Director, Enterprise Security and Operations.

Work Location:

Oscar is a blended work culture where everyone, regardless of work type or location, feels connected to their teammates, our culture and our mission.

If you live within commutable distance to our New York City office (in Hudson Square), our Tempe office (off the 101 at University Dr), or our Los Angeles office (in Marina Del Rey), you will be expected to come into the office at least two days each week. Otherwise, this is a remote / work-from-home role.

You must reside in one of the following states: Alabama, Arizona, Arkansas, California, Colorado, Connecticut, Florida, Georgia, Illinois, Indiana, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Vermont, Virginia, Washington, or Washington, D.C. Note, this list of states is subject to change.

Pay Transparency:

The base pay for this role is: $144,000 - $189,000 per year. You are also eligible for employee benefits, participation in Oscar’s unlimited vacation program, company equity grants, and annual performance bonuses.

Responsibilities

• Design, implement, and maintain security monitoring and detection systems, including SIEM, SOAR, and XDR platforms.
• Develop and implement security automation workflows to improve security operations and incident response processes.
• Enhance security visibility by implementing robust logging and alerting mechanisms across the environment.
• Identify and improve security vulnerabilities and misconfigurations.
• Lead incident response efforts, including containment, eradication, and postincident analysis.
• Collaborate with other teams to integrate security best practices into their workflows.
• Research emerging security technologies and threats.
• Mentor junior security engineers.
• Contribute to the development and maintenance of security policies and procedures.
• Participate in on-call rotation for security incidents.
• Compliance with all applicable laws and regulations.
• Other duties as assigned.

Qualifications

• 3+ years experience in security engineering or technical related role, focused on security operations
• Deep understanding of security concepts, including network security, endpoint security, vulnerability management, and incident response.
• Hands on experience with security information and event management (SIEM) systems.
• Experience with security automation and orchestration tools.
• Proficiency in scripting languages (e.g., Python, PowerShell, Bash).

Bonus Points

• Bachelor's degree in Computer Science, Information Security, or a related field
• Experience with Palo Alto Networks Cortex XDR and XSIAM.
• Experience with security orchestration, automation, and response (SOAR) platforms, specifically Palo Alto Networks XSOAR or Tines.
• Experience with cloud security platforms (AWS, Azure, GCP).
• Industry certifications (e.g., CISSP, SANS GIAC).
• Experience with threat intelligence platforms and feeds.
• Knowledge of regulatory compliance frameworks (e.g., NIST, ISO 27001, SOC 2).

This is an authentic Oscar Health job opportunity. Learn more about how you can safeguard yourself from recruitment fraudhere.

At Oscar, being an Equal Opportunity Employer means more than upholding discrimination-free hiring practices. It means that we cultivate an environment where people can be their most authentic selves and find both belonging and support. We're on a mission to change health care -- an experience made whole by our unique backgrounds and perspectives.

Pay Transparency: Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education, and experience. Full-time employees are eligible for benefits including: medical, dental, and vision benefits, 11 paid holidays, paid sick time, paid parental leave, 401(k) plan participation, life and disability insurance, and paid wellness time and reimbursements.

Reasonable Accommodation: Oscar applicants are considered solely based on their qualifications, without regard to applicant’s disability or need for accommodation. Any Oscar applicant who requires reasonable accommodations during the application process should contact the Oscar Benefits Team ([email protected]) to make the need for an accommodation known.

Artificial Intelligence (AI) Guidelines: Please see our AI Guidelines for the acceptable use of artificial intelligence during the interview process at Oscar.

California Residents: For information about our collection, use, and disclosure of applicants’ personal information as well as applicants’ rights over their personal information, please see our Notice to Job Applicants.