Senior HIPAA Cloud App Security Engineer (Remote)

Oshi Health; Indianapolis (IN); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 holidays + 1 floating holiday

401(k)

Remote-first

Meaningful equity

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will harden identity, secrets management, and secure AI/ML workflows from the ground up.

You will secure AWS, implement robust threat modeling, and drive vulnerability management across the product. This is a hands-on role with impact on patient data protection.

Qualifications

• Bachelor's degree or equivalent practical experience in CS or a related field.
• 6+ years in security engineering with hands-on app and cloud security.
• Experience in regulated environments (healthcare/fintech) a strong plus.
• Hands-on with SAST/DAST, GitHub Advanced Security and secret scanning.

Responsibilities

• Own application and product security, focusing on access-control and secrets exposure.
• Design security architecture for a shift to agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end including IAM, networking, logging, encryption.
• Enforce tooling and reviews (CodeQL, secret scanning, CODEOWNERS) on sensitive paths.
• Review AI/vendor integrations touching PHI for data flows and risk.
• Lead vulnerability management and coordinate pen-testing findings.
• Support HIPAA Security Rule safeguards and automation for a lean security function.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

SAST/DAST & CodeQL

Non-human identities & secrets

OAuth/OIDC/SAML & MFA

AI/LLM security

Scripting: Python

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Terraform

Okta

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will harden identity, secrets management, and secure AI/ML workflows from the ground up.

You will secure AWS, implement robust threat modeling, and drive vulnerability management across the product. This is a hands-on role with impact on patient data protection.