Senior Security Engineer — Cloud, AI & HIPAA (Remote)

Oshi Health; Salem (NH); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health Benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native, remote healthcare platform. You will set architecture standards, harden identity and secrets management, and integrate security into our AI-enabled engineering workflows.

This hands-on role demands strong IAM, cloud security, and secure SDLC expertise, with the ability to operate as the sole security specialist in a small team. Competitive compensation and equity are offered.

Qualifications

• Bachelor's degree or equivalent practical experience required.
• 6+ years in security engineering focusing on application security and cloud security (AWS).
• Hands-on with secure SDLC tooling (SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, software supply-chain security).
• Strong in IAM including Okta, OAuth/OIDC, SAML, MFA, and non-human identities management.

Responsibilities

• Own application and product security, focusing on access-control and secrets exposure in a member-facing healthcare app and APIs.
• Design and own security architecture for the shift to an agentic SDLC with phase-gate criteria and secure AI development workflows.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure the AWS environment end-to-end including IAM, network segmentation, logging, encryption, and workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, branch protection, CODEOWNERS).
• Review AI and third-party integrations before touching PHI; assess data flows, retention, DLP needs.
• Own vulnerability management and penetration testing relationships; drive findings to closure.
• Support HIPAA Security Rule safeguards and build automation for a lean security function.

Skills

Threat modeling

Secure design review

Secure code review

Identity and access management

AWS security

Python

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

SAST/DAST

secret scanning

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native, remote healthcare platform. You will set architecture standards, harden identity and secrets management, and integrate security into our AI-enabled engineering workflows.

This hands-on role demands strong IAM, cloud security, and secure SDLC expertise, with the ability to operate as the sole security specialist in a small team. Competitive compensation and equity are offered.