Senior Cloud Security Engineer - Healthcare SaaS (Remote)

Oshi Health; California; A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Remote-first

401(k)

Flexible PTO

Descripción de la vacante

Oshi Health seeks a Senior Security Engineer to own the security architecture of a remote-first, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and build security into AI workflows from the start. This is a hands-on, builder-focused role in a small team.

You will harden identity and secrets management, protect data, and ensure compliance with HIPAA and SOC 2. Collaboration with engineering and executives is essential for risk-aware decisions.

Formación

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong in IAM including Okta, OAuth/OIDC, SAML, MFA, and management of non-human identities and secrets.
• Familiarity with securing AI/LLM and agentic systems, prompt injection, and supply-chain risk.
• Comfortable being the sole security specialist on a small, cross-functional team and translating risk tradeoffs for engineers and execs.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and a shell).

Responsabilidades

• Own application and product security, including threat modeling and secure design/code reviews.
• Design and own security architecture for agentic SDLC and risk controls.
• Build and run non-human identity and secrets management at scale in SaaS/AWS estate.
• Secure AWS environment end-to-end: IAM, network, logging, encryption, workload protection.
• Enforce and tune security tooling: GitHub Advanced Security, CodeQL, secret scanning, branch protection.
• Review AI/third-party integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration testing relationships; drive closure.
• Support HIPAA Security Rule safeguards and detection/response capabilities.

Conocimientos

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Scripting & automation

Educación

Bachelor's degree in CS or equivalent

Herramientas

GitHub Advanced Security/CodeQL

SAST/DAST tooling

Secret scanning

Terraform

AWS services (S3, EKS)

Descripción del empleo

Oshi Health seeks a Senior Security Engineer to own the security architecture of a remote-first, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and build security into AI workflows from the start. This is a hands-on, builder-focused role in a small team.

You will harden identity and secrets management, protect data, and ensure compliance with HIPAA and SOC 2. Collaboration with engineering and executives is essential for risk-aware decisions.