Hi, we're Oscar. We're hiring a Senior Security Engineer, Application Security to join our Security team.

Oscar is the first health insurance company built around a full stack technology platform and a focus on serving our members.

We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves one that behaves like a doctor in the family.

About the Role :

As a Senior Security Engineer, you will collaborate closely with fellow Security team members as well as with cross-functional partners within Engineering and Product.

Your primary objective will be to safeguard classified information by thoroughly assessing and examining Oscar's applications and infrastructure.

In addition, you will be responsible for presenting identified risks and providing guidance on best practices to prevent future vulnerabilities.

You will report into the Senior Director of Security. This is a hybrid role. You will work part of the time in the New York City office and part of the time work-from-home / remote. #LI-Hybrid

The base pay for this role is $156,560-$205,485 per year. You are also eligible for employee benefits, company equity grants, participation in Oscar's unlimited vacation program and annual performance bonuses.

Responsibilities :

• Partner with cross-functional teams to identify, mitigate, and resolve security issues within Oscar’s tech stack (Web Applications, Mobile Apps, Network, Cloud)
• Perform and document technical testing based on industry recognized standards (OWASP) and best practices to identify security vulnerabilities against Oscar owned assets (website, mobile applications, networks and cloud environments), including :
• Threat Modeling
• Architecture / Design Reviews
• Application and Cloud Security Testing (Red Teaming)
• Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks
• Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused
• Collaborate with Security Leadership regarding technical vulnerabilities and potential impact if exploited
• Collaborate with non-technical teams to propose control and process enhancements to mitigate technical risk
• Stay up-to-date with current security trends, advisories, publications and relevant research for the organization
• Define hardening and secure design standards and use them to perform application security reviews in partnership with developer teams

Requirements :

• 5+ years of experience assessing Web Applications, Cloud Environments, Mobile Applications and Network security
• Ability to simplify complex security issues into actionable steps for remediation or risk mitigation
• Knowledge of industry recognized methodologies and frameworks for security testing (OWASP, OSSTM, PTES)
• Experience testing web applications for security vulnerabilities
• Experience testing mobile applications for security vulnerabilities
• Experience assessing cloud environment for misconfigurations and security vulnerabilities
• Experience testing networks for security vulnerabilities
• Working familiarity with AWS and GCP
• Experience using containers and container orchestration technology (Mesos and Kubernetes)

Bonus Points :

• Prior work experience in a risk management capacity
• Industry recognized certifications around offensive security (OSCP, OSCE,OSWP,OSWA,OSWE)
• Prior work experience in or understanding of security challenges specific to the healthcare or health insurance industries
• Experience assessing containers for security vulnerabilities

This is an authentic Oscar Health job opportunity. Learn more about how you can safeguard yourself from recruitment fraud.

At Oscar, being an Equal Opportunity Employer means more than upholding discrimination-free hiring practices. It means that we cultivate an environment where people can be their most authentic selves and find both belonging and support.

We're on a mission to change health care an experience made whole by our unique backgrounds and perspectives..

Pay Transparency :

Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education, and experience.

Full-time employees are eligible for benefits including : medical, dental, and vision benefits, 11 paid holidays, paid sick time, paid parental leave, 401(k) plan participation, life and disability insurance, and paid wellness time and reimbursements.

Good storytelling starts with great listening. At Audible, that means each role and every project has our audience in mind.

Because the same people who design, develop, and deploy our products also happen to use them. To us, that speaks volumes.

ABOUT THIS ROLE

As a leader in of Audible’s Information Security team, you are integral to the smooth operations of the overall information security and cybersecurity program.

You will work with executive stakeholders across the company to codify and retire risks, identify and close vulnerabilities and respond to incidents with speed and zeal.

You are a primary point of communication and escalation in matters of Information Security.

ABOUT YOU

You possess deep (depth and breadth) technical expertise in application security, data protection, third party / supply chain risk, incident response, as well as security policies, standards and regulations (for example, GDPR, CCPA).

As such, you will be a sought-after leader across the organization. You are refreshing in your understanding of the evolving landscape of threats and the security technology and techniques used to combat them.

You bring this passion to your work and your team and as a result, continuously raise the bar for Information Security at Audible

You are adept at written and verbal communication and can successfully communicate technical concepts to technical and non-technical audiences alike.

You will use this skill to earn trust throughout the company and to advocate for your team and its mission

As a Security Engineering Manager, you will...

• Hire, develop and lead a talented team of Cyber Security engineers and risk managers as they partner with software engineers and business team members to deliver secure products and services to our users world-wide
• Ensure that the entire organization learns and lives Audible’s information security policies
• Drive compliance through evangelizing, partnership, and education, as well as a robust program of third party / vendor reviews, incident response, application and data security reviews, threat modeling and risk posture, penetration testing, bug bounty, and proactive assessment, auditing, and governance of data protection, data leakage, least privilege, and data privacy controls
• Create, measure, and persistently track key risk metrics. Use these metrics to demonstrate to the organization that we are meeting our objectives through monthly and quarterly reviews

ABOUT AUDIBLE

At Audible, we innovate and inspire through the power of voice. We're changing the narrative on storytelling. As a leading creator and provider of premium audio storytelling, we've redefined the ways people access, discover, and share stories.

The stories we tell have the ability to transport and transform everyday moments into meaningful experiences and it's our people who make Audible's service possible.

We're listeners, storytellers, and problem-solvers. Our perspectives and experiences power our ideas and come together in our mission to unleash the power of the spoken word.

Audible offers a Hub+Home hybrid workplace model that gives employees flexibility between gathering in an Audible workspace (work from hub) and remote work (work from home).

For more information, please visit adbl.co / hybrid.

BASIC QUALIFICATIONS

• Bachelor's degree in Cyber Security, Computer Science, related field, or relevant information security experience
• 10+ years of industry experience with hands-on security engineering experience
• 10+ years of risk assessment and enabling organizations making security decisions
• 5+ years managing and building teams (including coaching and mentoring)

PREFERRED QUALIFICATIONS

• MBA or Master’s degree
• CISSP, CISM, CISA or similar professional certification
• A self-starter who can take general direction and produce specific results. When the resources are not immediately at-hand, you enjoy reaching out to a wide array of functional groups across an organization to get the information you need
• Experience working with issues related to GDPR and privacy
• Experience with incident response preparedness and insider threat programs
• Strong analytical and quantitative skills with the ability to use data and metrics to back up recommendations and drive actions
• Experience triaging security risks / vulnerabilities and ensuring that they are properly understood and managed
• Excellent oral and written communication skills

Audible is committed to a diverse and inclusive workplace. Audible is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

Good storytelling starts with great listening. At Audible, that means each role and every project has our audience in mind.

Because the same people who design, develop, and deploy our products also happen to use them. To us, that speaks volumes.

ABOUT THIS ROLE

As a leader in of Audible's Information Security team, you are integral to the smooth operations of the overall information security and cybersecurity program.

You will work with executive stakeholders across the company to codify and retire risks, identify and close vulnerabilities and respond to incidents with speed and zeal.

You are a primary point of communication and escalation in matters of Information Security.

ABOUT YOU

You possess deep (depth and breadth) technical expertise in application security, data protection, third party / supply chain risk, incident response, as well as security policies, standards and regulations (for example, GDPR, CCPA).

As such, you will be a sought-after leader across the organization. You are refreshing in your understanding of the evolving landscape of threats and the security technology and techniques used to combat them.

You bring this passion to your work and your team and as a result, continuously raise the bar for Information Security at Audible

You are adept at written and verbal communication and can successfully communicate technical concepts to technical and non-technical audiences alike.

You will use this skill to earn trust throughout the company and to advocate for your team and its mission

As a Security Engineering Manager, you will...

• Hire, develop and lead a talented team of Cyber Security engineers and risk managers as they partner with software engineers and business team members to deliver secure products and services to our users world-wide
• Ensure that the entire organization learns and lives Audible's information security policies
• Drive compliance through evangelizing, partnership, and education, as well as a robust program of third party / vendor reviews, incident response, application and data security reviews, threat modeling and risk posture, penetration testing, bug bounty, and proactive assessment, auditing, and governance of data protection, data leakage, least privilege, and data privacy controls
• Create, measure, and persistently track key risk metrics. Use these metrics to demonstrate to the organization that we are meeting our objectives through monthly and quarterly reviews

ABOUT AUDIBLE

At Audible, we innovate and inspire through the power of voice. We're changing the narrative on storytelling. As a leading creator and provider of premium audio storytelling, we've redefined the ways people access, discover, and share stories.

The stories we tell have the ability to transport and transform everyday moments into meaningful experiences and it's our people who make Audible's service possible.

We're listeners, storytellers, and problem-solvers. Our perspectives and experiences power our ideas and come together in our mission to unleash the power of the spoken word.

Audible offers a Hub+Home hybrid workplace model that gives employees flexibility between gathering in an Audible workspace (work from hub) and remote work (work from home).

For more information, please visit adbl.co / hybrid.

Basic Qualifications

• Bachelor's degree in Cyber Security, Computer Science, related field, or relevant information security experience
• 10+ years of industry experience with hands-on security engineering experience
• 10+ years of risk assessment and enabling organizations making security decisions
• 5+ years managing and building teams (including coaching and mentoring)

Preferred Qualifications

• MBA or Master's degree
• CISSP, CISM, CISA or similar professional certification
• A self-starter who can take general direction and produce specific results. When the resources are not immediately at-hand, you enjoy reaching out to a wide array of functional groups across an organization to get the information you need
• Experience working with issues related to GDPR and privacy
• Experience with incident response preparedness and insider threat programs
• Strong analytical and quantitative skills with the ability to use data and metrics to back up recommendations and drive actions
• Experience triaging security risks / vulnerabilities and ensuring that they are properly understood and managed
• Excellent oral and written communication skills

Audible is committed to a diverse and inclusive workplace. Audible is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

For individuals with disabilities who would like to request an accommodation, please visit https : / / www.amazon.jobs / en / disability / us.

We have an exciting opportunity to join our team as a Security Officer.

In this role, the successful candidate is responsible for providing security by protecting Medical Center patients, faculty, staff, students, and visitors and by preventing destructive acts to Medical Center property.

Job Responsibilities :

Investigates and follows-up on all incidents that compromise the safety and security of the Medical Center community or property.

Demonstrates investigative techniques appropriate to the situation. Demonstrates knowledge of appropriate contact person / department regarding identified hazards.

Assists in emergency situations as appropriate and according to Medical Center and Security Department policies and procedures.

Demonstrates the ability to gather facts and thoroughly assess the scene of an incident. Follows Security Department policies and procedures when interviewing subjects, suspects, and witnesses to an incident or when interviewing complainants.

Patrols Medical Center grounds and facilities in order to safeguard life and property. Performs various security checks to safeguard life and property.

Enforces Medical Center and Security Department policies and procedures as appropriate. Recognizes potentially hazardous situations and implements appropriate preventive measures.

Demonstrates knowledge of all security posts.

• Performs other duties as assigned.
• Prioritizes, completes and communicates assigned work. Completes assigned work by the end of the tour. Ensures effective coordination of departmental activities by informing department members of the current status of assigned work.

Demonstrates willingness and the ability to perform various work assignments competently. Willingness to take on additional assignments upon completion of assigned worked.

Communicates effectively with all departments, the Medical Center community and visitors. Maintains the integrity and confidentiality of information pertaining to the Medical Center including clinician and patient information.

Prepares reports as required. Composes written reports that are clear, complete and accurate. Completes reports in accordance with Security Department policies and procedures.

Submits reports to the supervisor on a timely basis.

Responds to the needs and requests for assistance from the Medical Center community and visitors. Provides a prompt and courteous response to requests and / or inquiries from Medical Center patients, visitors, faculty, staff and students.

Demonstrates an awareness of important issues that may underlie or impact the request, inquiry or response.

Minimum Qualifications :

• High School Diploma or the equivalent.
• Valid New York State Security Guard License.
• Effective oral, written communication and interpersonal skills.
• Drivers Permit upon hire (obtain drivers license within 4 months).
• BLS / CPR (In-person training) from American Heart Association or American Red Cross.

Required Licenses : Security Guard Reg-NYS, Driver's License, Basic Life Support Cert

Preferred Qualifications :

• Prior military / law enforcement experience or Fire Safety Director Certification a plus.
• Prior healthcare experience.
• Verbal and physical de-escalation training.
• Computer literate.

Qualified candidates must be able to effectively communicate with all levels of the organization.

NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.

NYU Langone Health is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment.

NYU Langone Health is a world-class, patient-centered, integrated academic medical center, known for its excellence in clinical care, research, and education.

It comprises more than 200 locations throughout the New York area, including five inpatient locations , a children's hospital , three emergency rooms and a level 1 trauma center.

Also part of NYU Langone Health is the Laura and Isaac Perlmutter Cancer Center , a National Cancer Institute designated comprehensive cancer center, and NYU Grossman School of Medicine , which since 1841 has trained thousands of physicians and scientists who have helped to shape the course of medical history.

We embrace diversity, inclusion, and individual skills, ideas, and knowledge. For more information, go to nyulangone.org , a nd interact with us on LinkedIn , Glassdoor , Indeed , Facebook , Twitter , YouTube and Instagram .

Position Summary :

We have an exciting opportunity to join our team as a Security Officer.

In this role, the successful candidate is responsible for providing security by protecting Medical Center patients, faculty, staff, students, and visitors and by preventing destructive acts to Medical Center property.

Job Responsibilities :

Investigates and follows-up on all incidents that compromise the safety and security of the Medical Center community or property.

Demonstrates investigative techniques appropriate to the situation. Demonstrates knowledge of appropriate contact person / department regarding identified hazards.

Assists in emergency situations as appropriate and according to Medical Center and Security Department policies and procedures.

Demonstrates the ability to gather facts and thoroughly assess the scene of an incident. Follows Security Department policies and procedures when interviewing subjects, suspects, and witnesses to an incident or when interviewing complainants.

Patrols Medical Center grounds and facilities in order to safeguard life and property. Performs various security checks to safeguard life and property.

Enforces Medical Center and Security Department policies and procedures as appropriate. Recognizes potentially hazardous situations and implements appropriate preventive measures.

Demonstrates knowledge of all security posts.

• Performs other duties as assigned.
• Prioritizes, completes and communicates assigned work. Completes assigned work by the end of the tour. Ensures effective coordination of departmental activities by informing department members of the current status of assigned work.

Demonstrates willingness and the ability to perform various work assignments competently. Willingness to take on additional assignments upon completion of assigned worked.

Communicates effectively with all departments, the Medical Center community and visitors. Maintains the integrity and confidentiality of information pertaining to the Medical Center including clinician and patient information.

Demonstrates appropriate communication techniques to defuse tense or hostile situations. Listens carefully and responds in an appropriate and professional manner.

Prepares reports as required. Composes written reports that are clear, complete and accurate. Completes reports in accordance with Security Department policies and procedures.

Submits reports to the supervisor on a timely basis.

Responds to the needs and requests for assistance from the Medical Center community and visitors. Provides a prompt and courteous response to requests and / or inquiries from Medical Center patients, visitors, faculty, staff and students.

Demonstrates an awareness of important issues that may underlie or impact the request, inquiry or response.

Minimum Qualifications :

• High School Diploma or the equivalent.
• Valid New York State Security Guard License.
• Effective oral, written communication and interpersonal skills.
• Drivers Permit upon hire (obtain drivers license within 4 months).
• BLS / CPR (In-person training) from American Heart Association or American Red Cross.

Required Licenses : Security Guard Reg-NYS, Driver's License, Basic Life Support Cert

Preferred Qualifications :

• Prior military / law enforcement experience or Fire Safety Director Certification a plus.
• Prior healthcare experience.
• Verbal and physical de-escalation training.
• Computer literate.

Qualified candidates must be able to effectively communicate with all levels of the organization.

NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.

NYU Langone Health is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment.

All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sex, sexual orientation, transgender status, gender dysphoria, national origin, age, religion, disability, military and veteran status, marital or parental status, citizenship status, genetic information or any other factor which cannot lawfully be used as a basis for an employment decision.

We require applications to be completed online.

If you wish to view NYU Langone Health's EEO policies, please click here . Please click here to view the Federal "EEO is the law" poster or visit https : / / www.

dol.gov / ofccp / regs / compliance / posters / ofccpost.htm for more information.

NYU Langone Health provides a salary range to comply with the New York City Law on Salary Transparency in Job Advertisements.

The salary range for the role is $49,043.75 - $56,483.75 Annually. Actual salaries depend on a variety of factors, including experience, specialty, education, and hospital need.

The salary range or contractual rate listed does not include bonuses / incentive, differential pay or other forms of compensation or benefits.

To view the Pay Transparency Notice, please click here

Required Skills

Required Experience