Senior Security Engineer - Cloud, AI & Health Tech (Remote)

Oshi Health; Lorida (FL); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote‑first flexibility

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and embed security into our engineering and AI workflows from the start.

You will build non-human identity solutions, secure our AWS estate, and enforce robust tooling across the SDLC. This role requires hands-on leadership in a small, cross-functional team.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with AWS cloud security experience.
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong IAM experience including Okta, OAuth/OIDC, SAML, MFA, and management of non-human identities.
• Familiar with securing AI/LLM and agentic systems and ability to explain tradeoffs to engineers and executives.
• Experience as the sole security specialist on a small cross-functional team.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in Python and shell scripting.

Responsibilities

• Own application and product security, threat modeling, secure design review, and secure code review with focus on access-control and secrets exposure.
• Design and own security architecture for agentic SDLC and phase-gate criteria.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end to end including IAM, network segmentation, logging, encryption.
• Enforce security tooling like CodeQL, secret scanning, push protection, CODEOWNERS review.
• Review AI and vendor integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships and drive remediation.
• Support HIPAA Security Rule safeguards and build automation for a small security function.

Skills

Application security

Cloud security

IAM / MFA

SAST/DAST tools

AI/LLM security

Secure SDLC tooling

Automation scripting

Education

Bachelor's degree in CS

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Push protection

Branch protection

CODEOWNERS enforcement

Job description

Oshi Health seeks a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and embed security into our engineering and AI workflows from the start.

You will build non-human identity solutions, secure our AWS estate, and enforce robust tooling across the SDLC. This role requires hands-on leadership in a small, cross-functional team.