Remote Senior App Security Engineer: Healthcare SaaS

Oshi Health; Rhode Island; Remote; USD 170,000 - 190,000; Full time

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will lead secure design, build non-human identity management, and secure AWS across S3, EKS, and Terraform while integrating AI/LLM safety controls.

You will collaborate with engineers and executives to prioritize risk, implement phase-gate criteria, and harden the platform against evolving threats, including vendor risk and PHI protection.

Qualifications

• Bachelor's degree in CS or equivalent practical experience.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM/identity management including Okta, OAuth/OIDC, SAML, MFA.
• Experience securing AI/LLM/agentic systems and vendor risk.
• Comfort being the sole security specialist on a small, cross-functional team.
• Knowledge of HIPAA Security Rule, SOC 2, NIST CSF.
• Proficient in Python and shell scripting.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design the security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end: IAM, network, logging, encryption, workloads.
• Tighten security tooling: GitHub Advanced Security, CODEOWNERS reviews.
• Review AI and vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and penetration-testing relationship, drive closure.
• Support HIPAA safeguards and build automation for security operations.

Skills

Security engineering

Cloud security

Scripting & automation

IAM & access management

AI/LLM security

Vulnerability management

Communication to executives

Threat modeling

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security/CodeQL

SAST/DAST tooling

Secret scanning

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will lead secure design, build non-human identity management, and secure AWS across S3, EKS, and Terraform while integrating AI/LLM safety controls.

You will collaborate with engineers and executives to prioritize risk, implement phase-gate criteria, and harden the platform against evolving threats, including vendor risk and PHI protection.