Senior Security Engineer — AI/Cloud Security (Remote)

Oshi Health; Kansas; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the technical security of its remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

You will lead threat modeling, secure code reviews, and non-human identity management while ensuring HIPAA security compliance and robust vulnerability management in a remote-first environment.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM skills: Okta, OAuth/OIDC, SAML, MFA.
• Familiarity with securing AI/LLM/agentic systems and risk.
• Able to work as sole security specialist in a small team.

Responsibilities

• Own application and product security including threat modeling and secure design reviews.
• Design security architecture for agentic SDLC and governance gates.
• Manage non-human identity and secrets at scale across SaaS and AWS.
• Secure AWS environment: IAM, networking, logging, encryption, protection.
• Enforce security tooling: CodeQL, secret scanning, branch protection, CODEOWNERS.
• Review AI/3rd-party integrations touching PHI and assess data flows and retention.
• Own vulnerability management and penetration testing relationships.
• Support HIPAA Security Rule safeguards and develop automated detections.

Skills

Secure SDLC tooling

Identity & access management

AI/LLM security

Scripting & automation

Security architecture

Communication of tradeoffs

Education

Bachelor's degree in Computer Science or equivalent

Tools

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Software supply-chain security

Job description

Oshi Health is seeking a Senior Security Engineer to own the technical security of its remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

You will lead threat modeling, secure code reviews, and non-human identity management while ensuring HIPAA security compliance and robust vulnerability management in a remote-first environment.