Senior Healthcare SaaS Security Engineer – Remote

Oshi Health; Lansing (MI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

Equity

Remote-first

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security standards, harden identity management, and embed security into engineering and AI workflows from the ground up.

This hands-on role demands technical rigor and clear risk tradeoffs with engineers and executives. As the first dedicated security engineer, you will shape architectural decisions, lead threat modeling, and align with HIPAA/NIST controls while

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering, with depth in application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for agentic SDLC and governance controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, branch protections, CODEOWNERS).
• Review AI/third-party integrations touching PHI; evaluate data flows and DLP needs.
• Own vulnerability management and penetration-testing relations; drive findings to closure.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

AWS cloud security

SAST/DAST tooling

Identity and access management

Python scripting

AI/LLM security

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Terraform

Okta/OAuth/OIDC

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security standards, harden identity management, and embed security into engineering and AI workflows from the ground up.

This hands-on role demands technical rigor and clear risk tradeoffs with engineers and executives. As the first dedicated security engineer, you will shape architectural decisions, lead threat modeling, and align with HIPAA/NIST controls while