Remote Senior Security Engineer — Cloud & AI Healthcare

Oshi Health; New Hampshire; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Equity

Remote-friendly

Health benefits

Flexible PTO

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our healthcare platform, including cloud and AI workflows. This hands-on role emphasizes architecture, identity management, and securing data across SaaS/AWS. You will work in a remote-friendly setup serving patients and providers nationwide.

Join a builder-focused team shaping how secure, compliant software operates in a cutting-edge health tech environment with strong emphasis on PHI protection and risk-based decisions.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application security and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong in identity and access management: Okta, OAuth/OIDC, SAML, MFA.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, authorization and risk.
• Able to work as sole security specialist on a small team and communicate tradeoffs clearly.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient with Python and shell scripting.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for agentic SDLC, with phase-gate criteria and controls for AI-written code.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling: GitHub Advanced Security, CodeQL, secret scanning, branch protection.
• Review AI/vendor integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration testing relation, driving findings to closure.
• Support HIPAA Security Rule technical safeguards and build detection/response capabilities.

Skills

Security engineering

Cloud security (AWS)

Identity & access management

SAST/DAST tooling

GitHub Advanced Security/CodeQL

AI/LLM security

Python scripting

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

Okta

OAuth/OIDC

SAML

Terraform

AWS

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our healthcare platform, including cloud and AI workflows. This hands-on role emphasizes architecture, identity management, and securing data across SaaS/AWS. You will work in a remote-friendly setup serving patients and providers nationwide.

Join a builder-focused team shaping how secure, compliant software operates in a cutting-edge health tech environment with strong emphasis on PHI protection and risk-based decisions.