Remote-First Senior Security Engineer: Cloud, AI & HIPAA

Oshi Health; Atlanta (GA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our SaaS and cloud-native healthcare platform. This highly technical, hands-on role covers identity, secrets management, secure development, and AI workflow security in a fully remote environment.

You will work on threat modeling, secure design reviews, and implement security controls across AWS, CI/CD, and vendor integrations, collaborating with a small cross-functional team and reporting to the Sr.

Qualifications

• Hands-on with secure SDLC tooling including SAST/DAST.
• Experience securing healthcare or regulated data is a plus.
• Proven ability to design and implement security controls in cloud environments.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for AI-enabled software development lifecycle.
• Build and manage non-human identity and secrets at scale.
• Secure AWS environment end-to-end (IAM, network, logging, encryption).
• Leverage security tooling and enforce best practices (CodeQL, secret scanning).
• Review AI/third-party integrations touching PHI for data protection.

Skills

Security engineering

Application security

Cloud security

Identity and access management

Scripting with Python

Communication

Risk prioritization

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Software supply-chain security

Okta

OAuth/OIDC

SAML

AWS security

Terraform

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our SaaS and cloud-native healthcare platform. This highly technical, hands-on role covers identity, secrets management, secure development, and AI workflow security in a fully remote environment.

You will work on threat modeling, secure design reviews, and implement security controls across AWS, CI/CD, and vendor integrations, collaborating with a small cross-functional team and reporting to the Sr.