Senior Security Engineer, App & Cloud Security (Remote)

Oshi Health; Michigan; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (dental/vision)

Remote-first flexibility

401(k) eligibility

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and integrate security into AI and software delivery.

You will lead threat modeling, secure design reviews, and secure code reviews, while working with a small team to balance risk and speed. This role offers remote-work within approved US states.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with deep app/security and cloud (AWS).
• Hands-on with secure SDLC tooling and identity management.
• Familiarity with HIPAA SOC 2 and NIST CSF is preferred.
• Experience in healthcare or regulated data environments is a plus.

Responsibilities

• Own application and product security including threat modeling and secure reviews.
• Design security architecture for a cloud-based, AI-influenced SDLC.
• Build and run identity and secrets management at scale.
• Secure AWS environment with IAM, networking, logging, encryption.
• Enforce security tooling like CodeQL, secret scanning, and reviews.
• Review AI/third-party integrations touching PHI and data flows.
• Own vulnerability management and drive findings to closure.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST tooling

GitHub Advanced Security/CodeQL

Secret scanning

Identity and access management

OAuth/OIDC/SAML

Python

Shell scripting

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

SAST/DAST tooling

secret scanning

OAuth/OIDC tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and integrate security into AI and software delivery.

You will lead threat modeling, secure design reviews, and secure code reviews, while working with a small team to balance risk and speed. This role offers remote-work within approved US states.