Senior Cloud & App Security Engineer (Remote)

Oshi Health; Yuma (AZ); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Equity

401(k)

Remote-friendly

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role focuses on architecture, identity, and secrets management across SaaS and AWS, with a bias toward practical, risk-based improvements.

You’ll work in a remote-first environment, collaborating with a small security team and engineering partners to embed security into AI development and vendor integrations, while maintaining HIPAA-aligned controls and compliance posture.

Qualifications

• Bachelor's degree in Computer Science or equivalent.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with secure SDLC tooling and identity management.
• Familiarity with HIPAA SOC2 and NIST guidance.

Responsibilities

• Own application and product security with focus on access control and secrets exposure.
• Design security architecture for agentic software lifecycle with controls.
• Build and run non-human identity management at scale.
• Secure AWS environment end to end including IAM and encryption.
• Enforce security tooling (GitHub Advanced Security, CODEOWNERS reviews).
• Review AI integrations for PHI data flows and retention.
• Own vulnerability management and pen-testing relationship.
• Support HIPAA safeguards and build detection/response capabilities.

Skills

Security engineering

Application security

AWS security

Identity management

Secure SDLC tooling

Python scripting

OAuth/OIDC

Healthcare compliance

Education

Bachelor's degree in CS

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role focuses on architecture, identity, and secrets management across SaaS and AWS, with a bias toward practical, risk-based improvements.

You’ll work in a remote-first environment, collaborating with a small security team and engineering partners to embed security into AI development and vendor integrations, while maintaining HIPAA-aligned controls and compliance posture.