Senior Security Engineer

Job not on LinkedIn

🕒 May 15

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Oscilar

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

💼 Consulting

🏥 Healthcare

⚖️ Legal

Consulting • Healthcare • Legal

Oscilar is a risk management platform that focuses on fraud defense, credit underwriting, onboarding risk, and AML compliance for financial institutions. Through its advanced AI Risk Decisioning™, Oscilar enables organizations to make faster and more intelligent risk decisions, monitor customer journeys, and ensure regulatory compliance seamlessly. Oscilar's platform provides comprehensive analytics and proactive detection capabilities, tailored to meet the unique risk needs of banks, fintechs, and credit unions.

📋 Description

• Own threat modeling across our core platform APIs, risk decisioning and event-ingestion systems, and agentic AI products; harden multi-tenant isolation and data-handling across designs and PRs. • Design, implement, and deploy authentication, authorization (user and API), and RBAC across our platform: own and propose new approaches as we scale • Stand up our AppSec program from the ground up: SAST (Semgrep), SCA (Dependabot/Snyk), secret scanning, IaC scanning, and container scanning on Pulumi + EKS • Build guardrails around LLM usage — prompt-injection defenses, output validation, and cost and abuse monitoring on Bedrock/Anthropic/OpenAI calls • Drive security incident process, vulnerability triage, and the responsible-disclosure workflow • Write SECURITY.md, maintain a threat registry, and champion secure-by-default patterns across the engineering org • Partner with IT on shared areas — incident response across corporate and product, access reviews, and audit evidence collection • Collaborate with product and engineering teams on feature design, embedding security early rather than gating at the end • Keep us aligned with current security standards and trends (OWASP, MITRE ATT&CK, and emerging LLM/agent security guidance)

🎯 Requirements

• Strong software engineering fundamentals — 5+ years building software, with the last 3+ focused on application or product security, ideally at a fintech or data-heavy SaaS company • Strong hands-on Java and/or Python code review skills — you're comfortable in a PR, not just in a report • Experience with SSO, SAML, OAuth 2.0, JWT, mTLS, and JOSE; multi-tenant authZ; PII handling/tokenization • Working knowledge of AWS security primitives (IAM, KMS, Secrets Manager, VPC) and Kubernetes

🏖️ Benefits

• 100% of your Medical/Dental (Care Plus) for you and your dependents • 100% Life / LTD (Prudential) • Caju Card for monthly meal allowance • Remote first culture. • Family-Friendly environment; Regular team events and offsites. • Unparalleled learning and professional development opportunities. • Making the internet safer by protecting online transactions.