Senior Security Engineer – AI/Cloud, Remote Healthcare

Oshi Health; Tallahassee (FL); A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Flexible PTO

401(k)

Remote-first work

Descripción de la vacante

Oshi Health is seeking a Senior Security Engineer to own the security of its healthcare SaaS platform. This role is hands-on and builder-focused, shaping security architecture, identity/secrets management, and security across engineering and AI workflows in a fully remote environment across approved US states.

You will drive threat modeling, secure design reviews, and secure code review, while ensuring compliance with HIPAA, SOC 2, and NIST CSF.

Formación

• Bachelor's degree in CS or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS) experience.
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong IAM knowledge including Okta, OAuth/OIDC, SAML, MFA, and non-human identities.
• Familiarity with AI/LLM security concepts and risk in agentic systems.
• Ability to communicate risk tradeoffs to engineers and executives.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Scripting and automation in Python and at least one shell.

Responsabilidades

• Own application and product security, focusing on access-control and secrets exposure risks.
• Design security architecture for a shift to agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale across AWS estate.
• Secure AWS environment including IAM, networking, logging, encryption, and workload protection.
• Tune security tooling (CodeQL, secret scanning, branch protection, CODEOWNERS enforcement).
• Review AI and vendor integrations touching PHI and assess data flows and DLP needs.
• Own vulnerability management and drive findings to closure with development feedback.
• Support HIPAA safeguards and stand up detection/response capabilities.

Conocimientos

Security engineering

Cloud security

IAM

Scripting (Python)

AI/LLM security

Regulatory compliance

Educación

Bachelor's degree

Herramientas

GitHub Advanced Security

CodeQL

SAST/DAST tooling

Okta

Descripción del empleo

Oshi Health is seeking a Senior Security Engineer to own the security of its healthcare SaaS platform. This role is hands-on and builder-focused, shaping security architecture, identity/secrets management, and security across engineering and AI workflows in a fully remote environment across approved US states.

You will drive threat modeling, secure design reviews, and secure code review, while ensuring compliance with HIPAA, SOC 2, and NIST CSF.