Senior Cloud & Application Security Engineer (Remote)

Oshi Health; Baton Rouge (LA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% premiums)

Equity + bonus

Flexible PTO & holidays

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its remote-first, cloud-native healthcare platform. You will shape architecture, tighten identity and secrets management, and embed security into engineering and AI workflows from the ground up.

You will lead threat modeling, secure design reviews, and secure code practices, partnering with cross-functional teams to protect PHI while enabling rapid product delivery.

Qualifications

• 6+ years in security engineering with cloud security (AWS).
• Hands-on with secure SDLC tooling and vendor security reviews.
• Experience in regulated data environments (healthcare/fintech a plus).
• Strong IAM skills including non-human identities and secrets.
• Familiarity with HIPAA/SOC 2/NIST frameworks.

Responsibilities

• Own application and product security design and reviews.
• Define security architecture for agentic software development lifecycle.
• Implement non-human identity and secrets management at scale.
• Secure AWS environment: IAM, network, logging, encryption.
• Operate security tooling: CodeQL, secret scanning, review gates.
• Evaluate AI/vendor data flows and data loss-prevention needs.

Skills

Security engineering

Identity & access management

Secure SDLC tooling

AI/LLM security

Risk-based prioritization

Education

Bachelor's degree in Computer Science or equivalent

Tools

Okta

OAuth/OIDC

SAML

GitHub Advanced Security

CodeQL

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its remote-first, cloud-native healthcare platform. You will shape architecture, tighten identity and secrets management, and embed security into engineering and AI workflows from the ground up.

You will lead threat modeling, secure design reviews, and secure code practices, partnering with cross-functional teams to protect PHI while enabling rapid product delivery.