Remote Senior Security Engineer - Cloud & App Security

Oshi Health; Providence (RI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Health benefits

401(k)

Equity

Bonus

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security architectures, harden identity and secrets management, and integrate security into engineering and AI workflows from the ground up.

You’ll lead threat modeling, secure design and code reviews, and oversee non-human identity management across our AWS estate, ensuring robust protection of PHI with a proactive, builder-focused mindset.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience required.
• 6+ years in security engineering with focus on application/product and cloud security (AWS). Healthcare/regulated environments a plus.
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.

Responsibilities

• Own security architecture for a cloud-native, fully remote healthcare platform.
• Lead threat modeling, secure design reviews, and secure code reviews focusing on access-control and secrets management.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection (S3, EKS, Terraform).
• Enforce tooling like CodeQL, secret scanning, branch protections, and CODEOWNERS controls on sensitive paths.
• Assess and secure AI/vendor integrations handling PHI; analyze data flows, retention, and data loss prevention.

Skills

SAST/DAST

CodeQL

IAM

Okta

OAuth/OIDC

SAML

MFA

AI/LLM security

Python scripting

Shell scripting

Education

Bachelor's degree in CS

Tools

GitHub Advanced Security

AWS

Terraform

Secret scanning tools

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security architectures, harden identity and secrets management, and integrate security into engineering and AI workflows from the ground up.

You’ll lead threat modeling, secure design and code reviews, and oversee non-human identity management across our AWS estate, ensuring robust protection of PHI with a proactive, builder-focused mindset.