Remote Senior Security Engineer - Cloud, AI & Health Tech

Oshi Health; United States; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first

Flexible PTO

Equity

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will shape security architecture, manage identity and secrets, and embed security into development and AI workflows from the start.

The role requires hands-on expertise in AWS security, threat modeling, and secure SDLC tooling, with collaboration across engineering and leadership to protect PHI and support a compliant security posture.

Qualifications

• Bachelor’s degree in CS or equivalent experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security, and secret scanning.
• Strong IAM expertise including Okta, OAuth/OIDC, SAML and MFA.
• Experience securing AI/LLM and agentic systems.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for shift to agentic SDLC with phase-gate criteria.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end (IAM, networking, logging, encryption).
• Enforce security tooling (CodeQL, secret scanning, branch protections).
• Review AI/vendor integrations touching PHI and assess data flows and retention.
• Own vulnerability management and pen-testing relationships.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Scripting (Python)

Okta/OAuth/SAML

HIPAA/regulatory knowledge

AI/LLM security

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning tools

SAST/DAST tooling

Terraform

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will shape security architecture, manage identity and secrets, and embed security into development and AI workflows from the start.

The role requires hands-on expertise in AWS security, threat modeling, and secure SDLC tooling, with collaboration across engineering and leadership to protect PHI and support a compliant security posture.