Senior Security Engineer, Cloud & AI Healthcare (Remote)

Oshi Health; Virginia Beach (VA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

Holidays

401(k)

Remote work

Equity

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will design security architecture, harden identity and secrets, and integrate security into engineering and AI workflows from Day One.

This hands-on role requires deep experience in AWS security, secure SDLC tooling, IAM, and vendor risk, with the ability to communicate tradeoffs to engineers and executives.

Qualifications

• Bachelor's degree in CS or equivalent.
• 6+ years in security engineering with cloud AWS focus.
• Healthcare/regulatory data experience a plus.
• Hands-on with secure SDLC tooling and software supply chain.
• Experience securing AI/LLM systems and agentic security.

Responsibilities

• Own application and product security, including threat modeling and secure reviews.
• Design security architecture for agentic SDLC and access-control challenges.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end, including IAM and encryption.
• Enforce and tune security tooling and review processes.
• Evaluate AI integrations for PHI data flows and vendor risk.
• Own vulnerability management and pen-testing relationships.
• Support HIPAA safeguards and detection/response automation.

Skills

Security engineering

AWS security

IAM

Secure SDLC tooling

Python scripting

Threat modeling

HIPAA awareness

Non-human identities

Education

BS in Computer Science

Tools

GitHub Security

SAST/DAST tooling

CodeQL

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will design security architecture, harden identity and secrets, and integrate security into engineering and AI workflows from Day One.

This hands-on role requires deep experience in AWS security, secure SDLC tooling, IAM, and vendor risk, with the ability to communicate tradeoffs to engineers and executives.