Remote Senior Security Engineer — Cloud, AI & HIPAA

Oshi Health; Florida; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, protecting PHI across AWS and SaaS components. This is a hands-on role that builds security into engineering and AI workflows from the start.

As the first dedicated security engineer, you will define architecture standards, manage identity and secrets, perform threat modeling, and ensure HIPAA, SOC 2, and NIST CSF compliance while collaborating with a small

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.
• Strong in identity and access management (Okta, OAuth/OIDC, SAML, MFA).
• Experience securing AI/LLM and agentic systems, including risk assessments.

Responsibilities

• Own application and product security, including threat modeling and secure code reviews.
• Design and own security architecture for the shift to an agentic software lifecycle.
• Build and manage non-human identity and secrets management at scale.
• Secure our AWS environment including IAM, networking, logging, encryption, and workload protection.
• Enforce security tooling (CodeQL, secret scanning, branch protection, CODEOWNERS).
• Review AI/third‑party vendor integrations for PHI data flows and DLP needs.
• Own vulnerability management and pen-testing relationships, driving remediation.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Secure SDLC

Identity and access management

AI/LLM security

Threat modeling

Executive communication

Python scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning tooling

SAST/DAST tooling

Okta

OAuth/OIDC

SAML

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, protecting PHI across AWS and SaaS components. This is a hands-on role that builds security into engineering and AI workflows from the start.

As the first dedicated security engineer, you will define architecture standards, manage identity and secrets, perform threat modeling, and ensure HIPAA, SOC 2, and NIST CSF compliance while collaborating with a small