Senior Security Engineer, Operations

Hi, we're Oscar. We're hiring a Senior Security Engineer, Operations to join our Security team.

Oscar is the first health insurance company built around a full stack technology platform and a focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.

About the role

You will take our newly implemented SIEM and quickly bringing the alert ecosystem on line, from alert quality and tuning to developing playbooks and escalation plans. We need someone who understands how to take the data streams we have available and leverage them to create high fidelity, high accuracy alerts. You will also bring experience of incident management and processes, mentor the team, and up-level the department.

You will report to the Director, Enterprise Security and Operations.

Work Location: 

Oscar is a blended work culture where everyone, regardless of work type or location, feels connected to their teammates, our culture and our mission. 

If you live within commutable distance to our New York City office (in Hudson Square), our Tempe office (off the 101 at University Dr), or our Los Angeles office (in Marina Del Rey), you will be expected to come into the office at least two days each week. Otherwise, this is a remote / work-from-home role. 

You must reside in one of the following states: Alabama, Arizona, Arkansas, California, Colorado, Connecticut, Florida, Georgia, Illinois, Indiana, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Vermont, Virginia, Washington, or Washington, D.C. Note, this list of states is subject to change. #LI-Remote

Pay Transparency:

The base pay for this role is: $144,000 - $189,000 per year. You are also eligible for employee benefits, participation in Oscar’s unlimited vacation program, company equity grants, and annual performance bonuses.

Responsibilities

• Design, implement, and maintain security monitoring and detection systems, including SIEM, SOAR, and XDR platforms.
• Develop and implement security automation workflows to improve security operations and incident response processes.
• Enhance security visibility by implementing robust logging and alerting mechanisms across the environment.
• Identify and improve security vulnerabilities and misconfigurations.
• Lead incident response efforts, including containment, eradication, and postincident analysis.
• Collaborate with other teams to integrate security best practices into their workflows.
• Research emerging security technologies and threats.
• Mentor junior security engineers.
• Contribute to the development and maintenance of security policies and procedures.
• Participate in on-call rotation for security incidents.
• Compliance with all applicable laws and regulations.
• Other duties as assigned.

Qualifications

• 3+ years experience in security engineering or technical related role, focused on security operations
• Deep understanding of security concepts, including network security, endpoint security, vulnerability management, and incident response.
• Hands on experience with security information and event management (SIEM) systems.
• Experience with security automation and orchestration tools.
• Proficiency in scripting languages (e.g., Python, PowerShell, Bash).

Bonus Points

• Bachelor's degree in Computer Science, Information Security, or a related field
• Experience with Palo Alto Networks Cortex XDR and XSIAM.
• Experience with security orchestration, automation, and response (SOAR) platforms, specifically Palo Alto Networks XSOAR or Tines.
• Experience with cloud security platforms (AWS, Azure, GCP).
• Industry certifications (e.g., CISSP, SANS GIAC).
• Experience with threat intelligence platforms and feeds.
• Knowledge of regulatory compliance frameworks (e.g., NIST, ISO 27001, SOC 2).