Senior Security Engineer - Cloud, AI & HIPAA (Remote)

Oshi Health; Clayton (NC); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO & 11 holidays

Remote-first with US state coverage

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure coding practices while coordinating with a small cross-functional team. This role emphasizes practical security work over policy creation.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST and GitHub Advanced Security.
• Strong in IAM and non-human identities management.
• Experience securing AI/LLM and agentic systems.
• Comfortable as sole security specialist on a small team.
• Working knowledge of HIPAA Security Rule, SOC 2, NIST CSF.
• Scripting/automation in Python and at least one shell.

Responsibilities

• Own application and product security, including threat modeling and secure code reviews.
• Design security architecture for agentic SDLC and control gates.
• Build identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment: IAM, networking, logging, encryption, workload protection.
• Enforce tooling like CodeQL, secret scanning, and CODEOWNERS reviews.
• Review AI/vendor integrations for PHI data flows and DLP needs.
• Own vulnerability management and penetration-testing relationship.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Application security

Cloud security (AWS)

IAM

OAuth/OIDC

SAML

Scripting (Python)

Secure SDLC tooling

Threat modeling

Non-human identities

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure coding practices while coordinating with a small cross-functional team. This role emphasizes practical security work over policy creation.