Senior Security Engineer — Cloud, AI & Healthcare (Remote)

Oshi Health; Philadelphia (Philadelphia County); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO with holidays

Remote-first work

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, protecting PHI and enabling safe AI-driven development. This hands-on role focuses on architecture, identity, and secrets management, shaping security across engineering and data workflows.

You will lead threat modeling, secure design reviews, and AWS security, balancing risk with speed to mature our security program while supporting HIPAA and industry

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.
• Strong in identity and access management including Okta, OAuth/OIDC, SAML, MFA.
• Familiarity with securing AI/LLM and agentic systems and related risk.
• Comfortable being the sole security specialist on a small, cross‑functional team and prioritizing ruthlessly by risk.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for the shift to an agentic SDLC with phase-gate criteria and controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure our AWS environment end to end (IAM, networking, logging, encryption).
• Enforce and tune security tooling (CodeQL, secret scanning, push protection, CODEOWNERS).
• Review AI and vendor integrations before touching PHI, evaluating data flows and data loss-prevention needs.
• Own vulnerability management and the penetration-testing relationship, driving findings to closure.
• Support HIPAA Security Rule technical safeguards and detection/response capabilities.

Skills

Security engineering

Application security

Cloud security AWS

Identity and access management

Scripting Python

Okta OAuth/OIDC SAML

Threat modeling

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

SAST/DAST tools

Secret scanning

Compliance automation platforms

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, protecting PHI and enabling safe AI-driven development. This hands-on role focuses on architecture, identity, and secrets management, shaping security across engineering and data workflows.

You will lead threat modeling, secure design reviews, and AWS security, balancing risk with speed to mature our security program while supporting HIPAA and industry