Remote Senior Security Engineer — Cloud & AI Security Lead

Oshi Health; Butlerville (IN); Remote; USD 170,000 - 190,000; Full time

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of its cloud-native healthcare platform. You’ll define security architecture, harden identity and secrets, and integrate security into our AI/SDLC from the ground up, working in a remote-first, US-wide setup.

You’ll lead threat modeling, secure design reviews, and security automation across AWS, S3, EKS, Terraform, and developer workflows. A hands-on, builder mindset is essential to protect PHI and enable rapid, compliant

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with AWS experience.
• Hands-on with SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong in IAM including Okta, OAuth/OIDC, SAML, MFA.
• Familiarity with securing AI/LLM and agentic systems.

Responsibilities

• Own application and product security with focus on access-control and secrets.
• Design security architecture for agentic SDLC and phase-gate criteria.
• Manage non-human identity and secrets across SaaS and AWS.
• Secure AWS environment including IAM, networking, logging, encryption.
• Enforce security tooling (GitHub Security, CodeQL, secret scanning).
• Review AI and third-party integrations touching PHI.
• Own vulnerability management and drive findings to closure.
• Support HIPAA Security Rule technical safeguards and detection/response.

Skills

Application security

Cloud security (AWS)

Identity and access management

Python scripting

Threat modeling

Secure SDLC tooling

Compliance frameworks (HIPAA, SOC 2, N

Vendor security assessment

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

GitHub Advanced Security/CodeQL

Secret scanning tooling

Software supply chain security

Job description

Oshi Health seeks a Senior Security Engineer to own the security of its cloud-native healthcare platform. You’ll define security architecture, harden identity and secrets, and integrate security into our AI/SDLC from the ground up, working in a remote-first, US-wide setup.

You’ll lead threat modeling, secure design reviews, and security automation across AWS, S3, EKS, Terraform, and developer workflows. A hands-on, builder mindset is essential to protect PHI and enable rapid, compliant