Senior Application Security Engineer — Remote

Oshi Health; Minneota (MN); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 holidays + floating holiday

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will architect security controls, harden identity and secrets management, and embed security into engineering and AI workflows from the ground up.

This hands-on role requires collaboration with a small team and a focus on practical risk reduction. You will drive threat modeling, secure SDLC tooling, and oversee vulnerability management while ensuring HIPAA/SOC 2

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Experience in healthcare/regulated data environments is a plus.

Responsibilities

• Own application and product security, threat modeling, secure design reviews, and secure code review with a focus on access control and secrets.
• Design and own security architecture for agentic SDLC, including phase-gate criteria and controls for AI-written code.
• Build and run non-human identity and secrets management across SaaS and AWS estate.
• Secure AWS environment end to end: IAM, network segmentation, logging, encryption, and workload protection.
• Enforce security tooling: GitHub Advanced Security, branch protection, CODEOWNERS enforcement on sensitive paths.
• Review AI/third-party vendor integrations touching PHI; evaluate data flows and DLP needs.
• Own vulnerability management and penetration testing relationship; drive findings to closure.
• Support HIPAA Security Rule safeguards and build automation for detection and response.

Skills

Identity & access management

Scripting (Python)

Security collaboration

Education

Bachelor's degree in Computer Science or equivalent

Tools

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Software supply‑chain security

Okta/OAuth/OIDC

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will architect security controls, harden identity and secrets management, and embed security into engineering and AI workflows from the ground up.

This hands-on role requires collaboration with a small team and a focus on practical risk reduction. You will drive threat modeling, secure SDLC tooling, and oversee vulnerability management while ensuring HIPAA/SOC 2