Senior Security Engineer - Cloud, AI & Healthcare Security

Oshi Health; Montpelier (VT); A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Descripción de la vacante

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform, protecting PHI and guiding secure AI workflows. This hands-on role sets architecture standards, hardens identity/secrets, and integrates security across engineering from the start.

You will work on threat modeling, secure design reviews, AWS security, and tooling, collaborating with a small team to balance risk, speed, and compliance in a healthcare context.

Formación

• Bachelor's degree or equivalent practical experience in CS.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM including Okta, OAuth/OIDC, SAML, MFA, and non-human identities.
• Experience securing AI/LLM and agentic systems.
• Able to work as the sole security expert on a small, cross-functional team.
• Familiar with HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in Python and shell scripting.

Responsabilidades

• Own application and product security, threat modeling, secure design review.
• Design security architecture for agentic SDLC, phase-gate criteria.
• Build/operate non-human identity & secrets management at scale.
• Secure AWS environment end-to-end: IAM, network, logs, encryption.
• Enforce security tooling: GitHub Advanced Security, CODEOWNERS reviews.
• Review AI/vendor integrations touching PHI for data flows & retention.
• Own vulnerability management and penetration-testing liaison.
• Support HIPAA technical safeguards and incident detection/response.

Conocimientos

SAST/DAST tooling

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

Identity & access management

Okta

OAuth/OIDC/SAML

Non-human identities & secrets

HIPAA knowledge

Python scripting

Shell scripting

AWS security

Educación

Bachelor's degree in Computer Science or equivalent

Herramientas

GitHub Advanced Security

CodeQL

Secret scanning

Terraform

Okta

AWS IAM

Descripción del empleo

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform, protecting PHI and guiding secure AI workflows. This hands-on role sets architecture standards, hardens identity/secrets, and integrates security across engineering from the start.

You will work on threat modeling, secure design reviews, AWS security, and tooling, collaborating with a small team to balance risk, speed, and compliance in a healthcare context.