Senior Security Engineer — AI/Agentic in Healthcare (Remote)

Oshi Health; Ohio; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first

401(k)

Flexible PTO

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role focuses on architecting security, identity/secrets management, and secure integration within AI-enabled development workflows.

You will influence security standards across engineering and AI processes in a fully remote, US-wide setup. You will lead threat modeling, secure design reviews, and compliant security practices while partnering with engineers and executives

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application security and cloud security (AWS). Experience in healthcare, fintech, or regulated environments is a plus.
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, supply-chain security.
• Strong in identity and access management, including Okta, OAuth/OIDC, SAML, MFA, and non-human identities/secrets.
• Experience securing AI/LLM and agentic systems: prompt injection, agent authorization, over-permissioning, model risk.
• Able to be the sole security expert on a small cross-functional team and explain tradeoffs clearly.
• Familiarity with HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and shell).

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review, focusing on access-control and secrets-exposure flaws for a member-facing healthcare app and its APIs.
• Design and own the security architecture for the shift to an agentic SDLC, including gate criteria and secure automation.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure our AWS environment end to end, including IAM, network segmentation, logging, encryption, and workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, branch protection, CODEOWNERS) to perform real work.
• Review AI and third-party vendor integrations before touching PHI, evaluating data flows and data-loss prevention needs.
• Own vulnerability management and penetration-testing relationships, driving findings to closure.
• Support HIPAA Security Rule safeguards and stand up detection/response capabilities for a lean security function.

Skills

Security engineering

IAM

SAST/DAST tooling

Python scripting

Cloud security (AWS)

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secrets management

SAML/OIDC/OAuth

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role focuses on architecting security, identity/secrets management, and secure integration within AI-enabled development workflows.

You will influence security standards across engineering and AI processes in a fully remote, US-wide setup. You will lead threat modeling, secure design reviews, and compliant security practices while partnering with engineers and executives