Senior Security Engineer - AI & Cloud (Remote)

Oshi Health; Georgia; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 Holidays

Floating holiday

401(k)

Remote-work flexibility

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role focuses on architecting secure systems, hardening identity and secrets, and embedding security into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and non-human identity management, while ensuring HIPAA-aligned safeguards and scalable detection and response capabilities across AWS infrastructure.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with strong cloud security (AWS). Healthcare/regulation experience is a plus.
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for shift to agentic SDLC and implement phase-gate criteria.
• Manage non-human identities and secrets, service accounts, tokens, OAuth grants.
• Secure AWS environment end to end: IAM, VPC/networking, logging, encryption, workload protection.
• Enforce security tooling: GitHub Advanced Security, CodeQL, branch protections, and CODEOWNERS enforcement.
• Review AI/vendor integrations touching PHI and assess data flows, retention, and DLP needs.
• Own vulnerability management and pen-testing relationships, drive remediation and feed back to development.
• Support HIPAA Security Rule controls and build detection/response automation.

Skills

Security engineering

AWS security

IAM

OAuth/OIDC

SAML

MFA

Secure SDLC tooling

Python scripting

Threat modeling

Education

Bachelor's degree in Computer Science or equivalent

Tools

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Supply-chain security

Job description

Oshi Health seeks a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role focuses on architecting secure systems, hardening identity and secrets, and embedding security into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and non-human identity management, while ensuring HIPAA-aligned safeguards and scalable detection and response capabilities across AWS infrastructure.