Remote Senior Security Engineer – Cloud & AI

Oshi Health; Bristol (RI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401(k)

Remote‑first

Flexible work

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set standards, harden identity and secrets management, and integrate security into engineering and AI workflows from the start.

You will build non-human identity solutions, defend our AWS estate, and ensure HIPAA/soc2 compliance while collaborating across a small, cross-functional team. This is a hands-on, high-impact role.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM knowledge: Okta, OAuth/OIDC, SAML, MFA.
• Experience securing AI/LLM and agentic systems and data flows.
• Able to operate as the sole security expert on a small team and communicate tradeoffs.

Responsibilities

• Own application and product security, including threat modeling and secure code reviews.
• Design and own security architecture for agentic software development lifecycle.
• Implement non-human identity and secrets management at scale.
• Secure AWS environment with IAM, networking, logging, encryption.
• Tune security tooling (GitHub Advanced Security, CODEOWNERS, reviews).
• Review AI/third-party vendor integrations for PHI handling and risk.
• Lead vulnerability management and penetration-testing relationships.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Threat modeling

Secure design

Secure code review

IAM knowledge

Python scripting

Shell scripting

Regulatory awareness

Communication

Education

Bachelor's degree in CS or equivalent

Tools

GitHub Advanced Security

CodeQL

SAST/DAST tooling

Secret scanning

OAuth/OIDC

Okta

AWS security

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set standards, harden identity and secrets management, and integrate security into engineering and AI workflows from the start.

You will build non-human identity solutions, defend our AWS estate, and ensure HIPAA/soc2 compliance while collaborating across a small, cross-functional team. This is a hands-on, high-impact role.