Senior Security Engineer: Cloud, AI & HIPAA Safeguards

Oshi Health; Lake Michigan Beach (MI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 holidays + floating day

401(k) eligibility

Remote‑first

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform and protect PHI. This hands-on role sets security standards and integrates security into engineering and AI workflows from day one.

You will secure AWS, manage identities and secrets at scale, and drive vulnerability management across CI/CD and third-party integrations while advancing HIPAA safeguards.

Qualifications

• 6+ years of security engineering with focus on app and cloud security.
• Hands-on with SDLC security tooling: SAST/DAST and secret scanning.
• Experience with IAM including non-human identities.
• Familiarity with securing AI/LLM and agentic systems.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Strong communication and risk-based decision making.

Responsibilities

• Own application and product security, focusing on access-control and secrets exposure.
• Design security architecture for agentic SDLC and risk controls.
• Build non-human identity and secrets management at scale.
• Secure AWS environment including IAM, network segmentation, logging, and encryption.
• Enforce security tooling like CodeQL, branch protection, CODEOWNERS.
• Review AI and vendor integrations for PHI protection.
• Own vulnerability management and drive findings to closure.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity & access mgmt

SAST/DAST tooling

CodeQL

Secret scanning

Python scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

Okta

OAuth/OIDC

SAML

GitHub Advanced Security

Job description

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform and protect PHI. This hands-on role sets security standards and integrates security into engineering and AI workflows from day one.

You will secure AWS, manage identities and secrets at scale, and drive vulnerability management across CI/CD and third-party integrations while advancing HIPAA safeguards.