Remote Senior Security Engineer - Cloud, AI & HIPAA

Oshi Health; Lake Michigan Beach (MI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will shape security architecture, harden identity and secrets management, and embed security into engineering and AI workflows from day one.

As the first dedicated security engineer, you will collaborate with cross-functional teams to protect PHI, implement scalable IAM, and drive vulnerability management.

Qualifications

• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling and identity management including OAuth/OIDC, MFA.
• Experience securing AI/LLM and agentic systems is a plus.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for agentic software development lifecycle and controls.
• Manage non-human identities and secrets at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption.
• Enforce tooling like GitHub Advanced Security, secret scanning, and CODEOWNERS reviews.
• Review AI/vendor integrations touching PHI for data flows and retention.
• Lead vulnerability management and penetration testing programs.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Application security

Cloud security AWS

Python scripting

Automation

IAM/OAuth

Education

Bachelor's degree in Computer Science or equivalent

Tools

SAST/DAST

GitHub Advanced Security

CodeQL

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will shape security architecture, harden identity and secrets management, and embed security into engineering and AI workflows from day one.

As the first dedicated security engineer, you will collaborate with cross-functional teams to protect PHI, implement scalable IAM, and drive vulnerability management.