Remote Senior Security Engineer – Cloud & AI Security

Oshi Health; Minnesota; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to take ownership of the security of our fully remote, cloud-native healthcare platform. You will shape security architecture, enforce identity and secrets governance, and embed security into engineering and AI workflows from the ground up.

In this role you will lead threat modeling, secure code reviews, and cloud security across AWS while collaborating with a small, cross-functional team.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with emphasis on application/product and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong IAM experience: Okta, OAuth/OIDC, SAML, MFA, non-human IDs.
• Experience securing AI/LLM/agentic systems and risk in workflows.
• Able to operate as sole security expert in a small cross-functional team and communicate tradeoffs clearly.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient in scripting/automation (Python and a shell).

Responsibilities

• Own application and product security, focus on access-control and secrets exposure in healthcare apps and APIs.
• Design security architecture for agentic software development lifecycle, with gate criteria and tested clawback procedures.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end to end: IAM, network segmentation, logging, encryption, workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, branch protection).
• Review AI and third-party vendor integrations touching PHI for data flows and retention risk.
• Own vulnerability management and penetration-testing relationships, drive remediation.
• Support HIPAA Security Rule safeguards and stand up detection/response automation.

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST tooling

IAM/OAuth/SAML

Python scripting

HIPAA/SOC 2/NIST

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Okta

Cloud security tooling

Job description

Oshi Health is seeking a Senior Security Engineer to take ownership of the security of our fully remote, cloud-native healthcare platform. You will shape security architecture, enforce identity and secrets governance, and embed security into engineering and AI workflows from the ground up.

In this role you will lead threat modeling, secure code reviews, and cloud security across AWS while collaborating with a small, cross-functional team.