Senior Security Engineer - Cloud, AI & HIPAA (Remote)

Oshi Health; Athens (GA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO and holidays

401(k) retirement plan

Remote-first work style

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security architecture of our fully remote, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and secure coding practices, focusing on access control and secrets management across AWS and SaaS environments.

The role demands hands-on implementation, collaboration with a small, cross-functional team, and deep knowledge of HIPAA, SOC 2, and NIST CSF. Remote-first with approved US states.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Hands-on with SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, supply-chain security.
• Strong in identity management (Okta, OAuth/OIDC, SAML, MFA) and non-human identities.
• Familiarity with securing AI/LLM and agentic systems and related risks.
• Able to operate as sole security specialist on a small team and explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting automation (Python and at least one shell).

Responsibilities

• Own application and product security including threat modeling and secure code review.
• Design security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end (IAM, networking, logging, encryption).
• Enforce and tune security tooling (GitHub Advanced Security, CODEOWNERS).
• Review AI/3rd-party integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and pentest relationships; drive findings to closure.
• Support HIPAA and build automation for security operations.

Skills

Security engineering

Cloud security (AWS)

Identity and access management

Scripting (Python)

AI/LLM security

Communication to executives

HIPAA/SOC2/NIST familiarity

Education

Bachelor's degree in Computer Science or equivalent

Tools

AWS

Terraform

GitHub Advanced Security

CodeQL

Okta

Job description

Oshi Health is seeking a Senior Security Engineer to own the security architecture of our fully remote, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and secure coding practices, focusing on access control and secrets management across AWS and SaaS environments.

The role demands hands-on implementation, collaboration with a small, cross-functional team, and deep knowledge of HIPAA, SOC 2, and NIST CSF. Remote-first with approved US states.