Data Security Engineer

Hi, we're Oscar. We're hiring a Data Security Engineer to join our Security team.

Oscar is the first health insurance company built around a full stack technology platform and a focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.

About the role

As a Data Security Engineer, you'll be at the forefront of safeguarding our digital ecosystem. You will collaborate with dynamic teams across Data, Engineering, Privacy, HR, and Compliance to architect cutting-edge security solutions that drive innovation and protect our business.

You will report to the Associate Director, Privacy & Compliance Engineering.

Work Location:

Oscar is a blended work culture where everyone, regardless of work type or location, feels connected to their teammates, our culture and our mission.

If you live within commutable distance to our New York City office (in Hudson Square), our Tempe office (off the 101 at University Dr), or our Los Angeles office (in Marina Del Rey), you will be expected to come into the office at least two days each week. Otherwise, this is a remote / work-from-home role.

You must reside in one of the following states: Alabama, Arizona, Arkansas, California, Colorado, Connecticut, Florida, Georgia, Illinois, Indiana, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Vermont, Virginia, Washington, or Washington, D.C. Note, this list of states is subject to change. #LI-Remote

Pay Transparency:

The base pay for this role is: $119,200 - $156,450 per year. You are also eligible for employee benefits,  participation in Oscar's unlimited vacation program, company equity grants, and annual performance bonuses. 

Responsibilities

• Drive Data Security Posture Management (DSPM): Develop and implement automated workflows, monitoring solutions, and alerts using Python and SQL to proactively identify and remediate data security risks across a variety of cloud and on-premises environments.
• Enhance Data Loss Prevention (DLP) Capabilities: Collaborate with cross-functional teams to strengthen DLP frameworks and policies, build custom detection logic, and integrate advanced tooling to prevent unauthorized data exfiltration.
• Develop and Maintain Security Tooling: Design, code, and maintain scalable security applications, APIs, and scripts in Python and SQL to streamline data governance, compliance reporting, and vulnerability management efforts.
• Analyze, Monitor, and Optimize Security Controls: Proactively analyze system logs, data flows, and user behaviors to detect anomalies, identify root causes, and continuously improve security controls to meet evolving threat landscapes.
• Champion Security Best Practices and Culture: Partner with internal stakeholders to refine security standards and promote a security-first mindset throughout the organization.
• Other duties as assigned

Qualifications

• 1+ years of relevant experience in data science, data engineering, or technical security engineering roles

Bonus Points

• 3+ years experience with modern database and storage (SQL) and data pipeline creation
• 2+ years of programming experience (strong preference for Python)
• Bachelor’s degree in a technical space
• Experience communicating technical issues or requirements and their implications to other areas of the business
• Ability to commit and manage code in multiple repositories
• Familiarity with HIPAA and other data protection regulations