Senior Security Engineer — AI-Driven Healthcare Platform

Oshi Health; United States; Remote; USD 170,000 - 190,000; Full time

Job summary

Oshi Health’s Senior Security Engineer will own the technical security of a remote, cloud-native healthcare platform, building security from the ground up rather than inheriting it. You will set architecture standards for product and AWS, harden identity and secrets, and embed security into engineering and AI workflows from the start.

This role creates guardrails for an agentic SDLC, partners with Product & Engineering, and leads vulnerability management, IAM, detection, and compliance with

Qualifications

• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST and GitHub Advanced Security.
• Strong IAM experience: Okta, OAuth/OIDC, MFA.
• Experience with HIPAA, SOC 2, and NIST frameworks.
• Bachelor’s degree in CS or equivalent.
• Comfort in a small cross-functional team.

Responsibilities

• Own application and product security including threat modeling and reviews.
• Enforce security tooling like GitHub Advanced Security as checks.
• Design security architecture for agentic SDLC.
• Manage non-human identities and secrets at scale.
• Secure AWS environment including IAM, networking, encryption.
• Oversee AI/vendor security reviews before touching PHI.
• Develop detection and response capabilities.
• Support HIPAA Security Rule safeguards.
• Lead vulnerability management and pen-testing cadence.
• Write security policies and runbooks to mature the program.
• Reduce attack surface through SaaS and identity rationalization.

Skills

Security engineering

Identity and access management

AI/LLM security

Scripting & automation

Compliance knowledge

Python

Education

Bachelor's degree in CS

Tools

GitHub Advanced Security

CodeQL

AWS Secrets Manager

Job description

Oshi Health’s Senior Security Engineer will own the technical security of a remote, cloud-native healthcare platform, building security from the ground up rather than inheriting it. You will set architecture standards for product and AWS, harden identity and secrets, and embed security into engineering and AI workflows from the start.

This role creates guardrails for an agentic SDLC, partners with Product & Engineering, and leads vulnerability management, IAM, detection, and compliance with