Senior Security Engineer, Cloud Security

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Oscar Health, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior Security Engineer, Cloud Security at Oscar Health will play a pivotal role in safeguarding the organization's cloud infrastructure. This position involves leveraging advanced security practices to ensure the integrity, confidentiality, and availability of sensitive data in the cloud. The ideal candidate will work collaboratively with various teams to assess risks and deploy appropriate security measures while also responding to security incidents and vulnerabilities. Strong experience in cloud security, alongside excellent problem-solving skills, will be essential for the success in this critical position.

Job Responsibilities

• Design and implement robust security architecture for cloud environments.
• Monitor and analyze cloud security incidents and vulnerabilities.
• Conduct security assessments and audits on cloud services and applications.
• Develop and enforce cloud security policies and best practices.
• Work closely with DevOps and engineering teams to integrate security within the CI/CD pipeline.
• Provide guidance and mentorship to junior security staff.
• Respond to security incidents and perform root cause analysis.
• Stay current with industry trends and emerging threats related to cloud technology.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 5 years of experience in security engineering, with a focus on cloud environments.
• Strong understanding of cloud service models (IaaS, PaaS, SaaS) and major cloud platforms (AWS, Azure, Google Cloud).
• Experience with security frameworks and compliance standards (NIST, ISO 27001, etc.).
• Proficient in scripting languages such as Python, Bash, or others for automation.
• Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or equivalent certification is highly preferred.
• Hands-on experience with cloud security tools and services (e.g., security information and event management systems, identity and access management).

Technologies & Tools

The Senior Security Engineer will use a variety of technologies and tools to ensure robust cloud security. These include cloud platforms such as AWS, Azure, and Google Cloud; security tools such as firewalls, intrusion detection systems, and SIEM solutions; as well as automation tools for monitoring and compliance. Familiarity with container security platforms and configuration management tools may also be required to effectively integrate security into operational workflows.

Ideal Candidates

Ideal candidates for this position should possess strong analytical and critical thinking skills, enabling them to identify and mitigate potential security risks effectively. They should be proactive in keeping pace with the rapidly evolving cloud security landscape and demonstrate excellent communication skills for articulating complex security concepts to non-technical stakeholders. A collaborative mindset, combined with the ability to lead and mentor others, will be crucial for fostering a culture of security awareness across teams.