Senior Engineering Manager, Platform Security

Hi, we're Oscar. We're hiring a Senior Manager, Platform Security Engineering to join our Security team.

About the role

In this role, you will be responsible for leading the team of Platform Security Engineers responsible for our cloud security efforts.  Oscar’s Platform Security team is focused on building security infrastructure and paved roads to enable Oscar’s cloud engineers to build faster and safer, while keeping Oscar’s infrastructure secure. You will collaborate extensively with diverse teams, offering strategic insights, engineering efforts, and counsel to ensure the alignment of Oscar's security objectives with overarching business goals. You will be involved in shaping and driving Oscar's security strategies through proactive measures and continuous improvement and demonstrated curiosity on continuously evolving our approaches.

You will report into the Chief Information Security Officer. 

Work Location:

This is a hybrid role in our New York City office (in Hudson Square). You will work part of the time in the office and part of the time remote / work-from-home.

Pay Transparency:

The base pay for this role is: $174,400 - $228,900 per year. You are also eligible for employee benefits, participation in Oscar’s unlimited vacation program, company equity grants, and annual performance bonuses.

Responsibilities

• Responsible for driving medium-to-long term innovation and strategy for cloud security at Oscar, and developing actionable approaches to implementation.
• Lead collaboration across cloud engineering functions to drive effective and secure outcomes that allow engineering teams to move faster while improving security
• Develop solutions that secure the business while also meeting compliance obligations
• Collaborate closely with cross-functional teams to proactively identify, address, and resolve security concerns across Oscar, including proposing enhanced controls and procedural strategies to mitigate technical risks
• Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks
• Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused
• Collaborate effectively with Security Leadership, providing insights into technical issues and their potential impacts
• Engage in multiple-layers of Oscar’s Technology stack to design security measures around protecting Oscar’s systems.
• Simplify intricate security concerns into actionable steps for effective remediation or risk mitigation.
• Define hardening and secure design standards and use them to perform architecture security reviews in partnership with developer teams
• Compliance with all applicable laws and regulations
• Other duties as assigned

Qualifications

• 6+ years experience in Technology related field
• 5+ years experience in Cloud/Platform Security
• Familiarity with industry standards and compliance frameworks (such as SOC, SOX., NIST,, HIPAA) and experience in ensuring organizational adherence to these standards.

Bonus Points

• Certifications such as CISSP, CISM, CISA, CEH, or vendor-specific certifications.
• Proficiency in managing security projects, including planning, execution, and successful delivery within timelines and budgets.