Senior Security Engineer — Cloud, AI & HIPAA Security

Oshi Health; Georgia; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first / remote-friendly

Flexible PTO

11 Holidays and 1 floating holiday

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and integrate security into engineering and AI workflows from the ground up.

This hands-on role requires building scalable security controls, threat modeling, and ensuring compliance with HIPAA and industry standards.

Qualifications

• Bachelor's degree in Computer Science or equivalent.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.

Responsibilities

• Own application and product security, focusing on access-control and secrets exposure.
• Design security architecture for agentic SDLC with phase-gate criteria.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end (IAM, network, logging, encryption, S3, EKS, Terraform).
• Enforce and tune security tooling (CodeQL, secret scanning, CODEOWNERS reviews).
• Review AI and vendor integrations touching PHI; assess data flows and DLP needs.

Skills

Security engineering

Application security

Cloud security

Threat modeling

Secure SDLC tooling

Identity and access management

Communication with engineers and execs

Education

Bachelor's degree in Computer Science or equivalent

Tools

SAST/DAST

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

Okta

OAuth/OIDC

SAML

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and integrate security into engineering and AI workflows from the ground up.

This hands-on role requires building scalable security controls, threat modeling, and ensuring compliance with HIPAA and industry standards.