Senior Security Engineer: AI & Cloud Healthcare (Remote)

Oshi Health; Salem (NH); A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Flexible PTO

401(k)

Descripción de la vacante

Oshi Health is building a fully remote, cloud-native healthcare platform. As Senior Security Engineer, you will own security architecture, identity and secrets management, and security integrations across AWS and SaaS environments, shaping secure AI workflows and the developer experience.

You will work hands-on to enforce robust threat modeling, secure coding practices, and automated security controls, while collaborating with engineering and leadership to balance risk and speed in delivering

Formación

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with focus on application/product security and cloud security (AWS).
• Hands‑on with SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM knowledge including Okta, OAuth/OIDC, SAML and non-human identities/secrets.
• Experience securing AI/LLM and agentic systems and risk management.
• Able to work as sole security specialist in a small cross‑functional team and explain tradeoffs.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and at least one shell).

Responsabilidades

• Own application and product security, focusing on access-control and secrets exposure flaws.
• Design security architecture for agentic SDLC, including phase-gate criteria and control frameworks.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (CodeQL, secret scanning, push protection, CODEOWNERS).
• Review AI and third‑party integrations touching PHI for data flows and retention.
• Own vulnerability management and penetration testing relations, driving findings to closure.
• Support HIPAA Security Rule safeguards and build detection/response automation.

Conocimientos

Security engineering

AWS security

Identity management

SAST/DAST

GitHub Advanced Security

Threat modeling

Python scripting

Executive communication

Educación

Bachelor's degree in Computer Science or equivalent

Herramientas

Okta

OAuth/OIDC

SAML

CodeQL

Terraform

Descripción del empleo

Oshi Health is building a fully remote, cloud-native healthcare platform. As Senior Security Engineer, you will own security architecture, identity and secrets management, and security integrations across AWS and SaaS environments, shaping secure AI workflows and the developer experience.

You will work hands-on to enforce robust threat modeling, secure coding practices, and automated security controls, while collaborating with engineering and leadership to balance risk and speed in delivering