Senior Security Engineer — AI-Driven Health Tech (Remote)

Oshi Health; Northern (KY); Hybrid; USD 170,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Equity

Remote work in the U.S.

Life Concierge

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of a cloud-native healthcare platform. You will design guardrails for an agentic SDLC, protect PHI, and partner with Product & Engineering to move fast with confidence. This role is remote in the U.S.

and reports to the Sr. Director, Security & IT. You will implement SAST/DAST, IAM strategies, non-human identities, and automation to scale security across AWS and SaaS.

Qualifications

• 6+ years in security engineering, with depth in application/product security and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security / CodeQL, secret scanning, and software supply-chain / dependency security.
• Strong in identity and access management: Okta, OAuth/OIDC, SAML, phishing-resistant MFA, and the management of non-human identities and secrets (e.g., AWS Secrets Manager, or equivalents).
• Familiarity with — or drive to go deep on — securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, NHI sprawl, and model/supply-chain risk.
• Bachelor’s degree in Computer Science or equivalent practical experience.
• Certifications (nice to have, not required): OSCP, GIAC (GWAPT, GCSA, GCLD), AWS Certified Security – Specialty, CISSP, or Okta Certified Professional.

Responsibilities

• Own application and product security: threat modeling, secure design review, and secure code review for healthcare app and APIs.
• Make our tooling do real work: enforce GitHub Advanced Security as required status checks with protections and CODEOWNERS.
• Design and own security architecture for our agentic SDLC, with phase-gate criteria and guardrails.
• Build and run non-human identity (NHI) and secrets management at scale across SaaS and AWS estate.
• Secure our AWS environment: IAM/IC, network segmentation, logging, encryption, and workload protection.
• Run security review of AI and third-party vendor integrations before they touch PHI.
• Stand up and tune detection and response with AI-based baselines and anomaly detection.
• Support HIPAA Security Rule technical safeguards: encryption at rest, audit controls, vulnerability scanning, inventory.
• Own vulnerability management and pen-testing cadence; drive findings to closure.
• Reduce attack surface via SaaS and identity rationalization; write security policies and runbooks.
• Build automation (scripting, IaC) to give security leverage.

Skills

Security engineering

AWS security

Identity & access management

Scripting & automation

AI/LLM security

Secure SDLC tooling

Education

Bachelor’s degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

OAuth/OIDC

AWS Secrets Manager

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of a cloud-native healthcare platform. You will design guardrails for an agentic SDLC, protect PHI, and partner with Product & Engineering to move fast with confidence. This role is remote in the U.S.

and reports to the Sr. Director, Security & IT. You will implement SAST/DAST, IAM strategies, non-human identities, and automation to scale security across AWS and SaaS.