Senior Security Engineer - Cloud, AI & HIPAA (Remote)

Oshi Health; Phoenix (AZ); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first work style

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from day one.

You’ll work hands-on, focusing on access controls, risk reduction, and compliance with HIPAA Security Rule, SOC 2, and NIST. This role is remote-first, with compensation of $170k–$190k plus bonus and equity.

Qualifications

• Bachelor's degree in CS or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience in healthcare/regulated environments is a plus.
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• IAM and non-human identities management (Okta, OAuth/OIDC, SAML, MFA).
• Familiarity with securing AI/LLM and agentic systems: prompt injection and model risk.
• Comfort being the sole security specialist on a small team and communicating tradeoffs to engineers/executives.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and shell).

Responsibilities

• Own application and product security, including threat modeling and secure design/code reviews.
• Design security architecture for agentic SDLC and phase-gate criteria.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end: IAM, networks, encryption, S3, EKS, Terraform.
• Enforce and tune security tooling (CodeQL, secret scanning, review gates).
• Review AI/third-party integrations touching PHI for data protection.
• Own vulnerability management and pen-testing relationship.
• Support HIPAA Security Rule technical safeguards and detection/response automation.

Skills

Secure SDLC tooling

IAM (Okta/OIDC)

AI/LLM security

AWS security

Risk communication

Education

Bachelor's degree in CS or equivalent

Tools

SAST/DAST

GitHub CodeQL

Secret scanning

Software SBOM/Deps

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from day one.

You’ll work hands-on, focusing on access controls, risk reduction, and compliance with HIPAA Security Rule, SOC 2, and NIST. This role is remote-first, with compensation of $170k–$190k plus bonus and equity.