Remote-First Senior Security Engineer — Cloud & HIPAA

Oshi Health; Phoenix (AZ); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-friendly

Flexible PTO

Equity

Job summary

Oshi Health is hiring a Senior Security Engineer to own the security of a cloud-native healthcare platform. This hands-on role focuses on identity and secrets management, secure design, and hardening across AWS and AI workflows.

You will shape security architecture, enable automated defenses, and collaborate with engineering to protect PHI in a remote-friendly environment. You will drive threat modeling, implement secure SDLC tooling, and lead vulnerability management with a pragmatic,

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering, with cloud security (AWS).
• Hands-on with SSDL tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM knowledge: Okta, OAuth/OIDC, SAML, phishing-resistant MFA.
• Experience securing AI/LLM and agentic systems.
• Able to be the sole security specialist on a small team.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient with Python and at least one shell

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end (IAM, networking, logging, encryption).
• Enforce and tune security tooling (GitHub Advanced Security, CODEOWNERS).
• Review AI/vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and penetration-testing relationship.
• Support HIPAA safeguards and build detection and response capabilities.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Python scripting

Secure SDLC tooling

Education

Bachelor's degree in CS or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

SAST/DAST

Job description

Oshi Health is hiring a Senior Security Engineer to own the security of a cloud-native healthcare platform. This hands-on role focuses on identity and secrets management, secure design, and hardening across AWS and AI workflows.

You will shape security architecture, enable automated defenses, and collaborate with engineering to protect PHI in a remote-friendly environment. You will drive threat modeling, implement secure SDLC tooling, and lead vulnerability management with a pragmatic,