Senior Cloud & Application Security Engineer (Healthcare)

Oshi Health; Lorida (FL); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401(k) retirement plan

Flexible PTO

Remote-first

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform, protecting real patient data. This hands-on role involves shaping security architecture and building security into engineering and AI workflows from the ground up.

You will lead threat modeling, secure design/reviews, and non-human identity management at scale, while securing AWS environments and enforcing robust tooling across CI/CD.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong in identity and access management, including Okta, OAuth/OIDC, SAML, MFA, and non-human identities.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, and model risk.
• Comfortable being the sole security specialist on a small, cross-functional team and communicating tradeoffs clearly.
• Working knowledge of HIPAA Security Rule, SOC 2, and the NIST CSF.
• Proficient with scripting and automation (Python and shell).

Responsibilities

• Own application and product security, including threat modeling and secure design/review.
• Design and own security architecture for agentic SDLC and phase gates.
• Build and run non-human identity and secrets management at scale.
• Secure our AWS environment end to end (IAM, networking, logging, encryption).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, branch protection).
• Review AI and third‑party vendor integrations touching PHI and assess data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships.
• Support HIPAA Security Rule safeguards and build automation for detection/response.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Threat modeling

Secure SDLC tooling

Scripting (Python)

Communication to executives

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

SAST/DAST

Secret scanning

Terraform

AWS security tooling

Job description

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform, protecting real patient data. This hands-on role involves shaping security architecture and building security into engineering and AI workflows from the ground up.

You will lead threat modeling, secure design/reviews, and non-human identity management at scale, while securing AWS environments and enforcing robust tooling across CI/CD.