Senior Security Engineer - AI/Cloud Health Platform

Oshi Health; Bristol (RI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health is hiring a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform.

You will lead threat modeling, secure design reviews, and secure code reviews with a focus on access control and secrets management across the SaaS and AWS estate. This hands-on role shapes security architecture for an agentic software development lifecycle and requires collaboration with engineers and executives.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands‑on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.
• Strong in identity and access management (Okta, OAuth/OIDC, SAML, MFA).
• Experience securing AI/LLM and agentic systems: prompt injection, agent authorization, risk management.
• Able to explain tradeoffs to engineers and executives while prioritizing by risk.
• Familiarity with HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting and automation (Python and shell).

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review focusing on access-control and secrets exposure.
• Design and own security architecture for agentic SDLC and implement phase-gate criteria and clawback procedures.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, and workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, branch protection, CODEOWNERS reviews).
• Review AI and vendor integrations touching PHI, assessing data flows, retention, and DLP needs.
• Own vulnerability management and penetration-testing relationships, drive findings to closure, feed back into development.
• Support HIPAA Security Rule safeguards and build detection/response automation.

Skills

Security engineering

Application security

Cloud security AWS

Identity management

OAuth/OIDC

SAML

MFA

AI/LLM security

Scripting automation

Executive communication

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning

SAST/DAST

OAuth/OIDC tooling

Job description

Oshi Health is hiring a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform.

You will lead threat modeling, secure design reviews, and secure code reviews with a focus on access control and secrets management across the SaaS and AWS estate. This hands-on role shapes security architecture for an agentic software development lifecycle and requires collaboration with engineers and executives.