Remote Senior Security Engineer — SaaS & Cloud Security

Oshi Health; Maine; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k) plan

Remote-first

Job summary

Oshi Health is hiring a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will shape security architecture, manage identities and secrets, and integrate security into our engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and code reviews, and work across AWS, S3, EKS, Terraform, and GitHub Advanced Security to protect PHI while supporting a fast-growing, patient-focused service.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST and GitHub Advanced Security/CodeQL.
• Strong IAM experience (Okta, OAuth/OIDC, SAML, MFA).
• Experience securing AI/LLM/agentic systems and risk management.
• Comfort as sole security expert on a small cross-functional team.
• Familiarity with HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in Python and shell scripting.

Responsibilities

• Own application and product security, focusing on access-control and secrets-flaws for a healthcare app and APIs.
• Design and own security architecture for agentic SDLC and phase-gate controls.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption, S3, EKS, Terraform.
• Tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, CODEOWNERS).
• Review AI and third-party vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and pen-testing relationships, driving fixes.
• Support HIPAA Security Rule safeguards and build detection/response automation.

Skills

Security engineering

Application security

Cloud security AWS

Threat modeling

Identity and access management

Scripting (Python)

OAuth/OIDC SAML

HIPAA/NIST familiarity

Education

Bachelor's degree in CS or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning tools

Terraform

AWS tooling

Job description

Oshi Health is hiring a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will shape security architecture, manage identities and secrets, and integrate security into our engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and code reviews, and work across AWS, S3, EKS, Terraform, and GitHub Advanced Security to protect PHI while supporting a fast-growing, patient-focused service.