Remote Senior Security Engineer, AI-Driven Healthcare

Oshi-Health-; Chicago (IL); On-site; USD 170,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Equity

Medical/Dental/Vision plans

Life Concierge through Overalls

Professional development opportunities

Flexible PTO

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secret management, and embed security into engineering and AI workflows from the start.

You will partner with Product & Engineering to enable fast, secure delivery, oversee SDLC gates for AI transitions, and ensure HIPAA, SOC 2, and audit readiness.

Qualifications

• 6+ years in security engineering, with cloud security focus (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security, secret scanning.
• Strong in IAM: Okta, OAuth/OIDC, SAML, MFA, non-human identities.
• Familiarity with securing AI/LLM and agentic systems.
• Sole security specialist on a small cross-functional team; able to explain tradeoffs.
• Knowledge of HIPAA Security Rule, SOC 2, NIST CSF; compliance automation is a plus.
• Proficient in scripting and automation (Python, shell).
• Bachelor’s degree in CS or equivalent practical experience.

Responsibilities

• Own application and product security including threat modeling and secure code review.
• Enforce GitHub Advanced Security and required status checks with protections.
• Design security architecture for AI transition and agentic SDLC.
• Build and manage non-human identities and secrets across SaaS and AWS.
• Secure AWS environment: IAM, networking, encryption, logging, baselines.
• Lead security reviews of AI and vendor integrations touching PHI.
• Establish detection and response using AI-based baselines and anomalies.
• Support HIPAA Security Rule safeguards with encryption and auditing.

Skills

Security engineering

Secure SDLC tooling

Identity and access management

AI/LLM security

Cross-functional collaboration

HIPAA/SOC2/NIST familiarity

Scripting and automation

Computer Science degree

Education

Bachelor’s degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

AWS Secrets Manager

SAST/DAST tooling

Job description

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secret management, and embed security into engineering and AI workflows from the start.

You will partner with Product & Engineering to enable fast, secure delivery, oversee SDLC gates for AI transitions, and ensure HIPAA, SOC 2, and audit readiness.