Remote Senior Security Engineer - AI & Cloud (Healthcare)

Oshi Health; Colorado; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Bonus

Equity

Remote-first

Health benefits

Flexible PTO

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and bake security into engineering and AI workflows from the start.

You will lead threat modeling, secure design/code reviews, and implement access-control safeguards across our SaaS and AWS environment, while collaborating with a small cross-functional team.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience with healthcare/fintech or regulated data environments is a plus.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, over-permissioning.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle, including phase-gate criteria and clawback procedures.
• Build and run non-human identity and secrets management across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, push protection).
• Review AI and third-party integrations for PHI data flows, retention, and data loss-prevention needs.

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST

GitHub Advanced Security/CodeQL

Identity and secrets management

AI/LLM security

Scripting (Python)

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and bake security into engineering and AI workflows from the start.

You will lead threat modeling, secure design/code reviews, and implement access-control safeguards across our SaaS and AWS environment, while collaborating with a small cross-functional team.