Senior Security Engineer, Cloud & AI (Remote)

Oshi Health; Rhode Island; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first

Meaningful equity

Flexible PTO

401(k)

Job summary

Oshi Health, a remote-first healthcare platform, seeks a Senior Security Engineer to own security architecture and hands-on engineering across its SaaS/cloud environment. You’ll harden identity, protect PHI, and embed secure AI workflows from the ground up.

You’ll lead threat modeling, secure code reviews, and non-human identity management, partnering with a small cross-functional team to balance risk and velocity in a regulated healthcare context.

Qualifications

• Bachelor’s degree in Computer Science or equivalent practical experience.
• 6+ years of security engineering with emphasis on app/security and AWS.
• Hands-on with SDLC tooling: SAST/DAST, CodeQL, secret scanning.
• Strong IAM skills including Okta, OAuth/OIDC, SAML and MFA.
• Experience with AI/LLM security and data sensitivity in healthcare.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for an agentic SDLC and gated AI development.
• Manage non-human identities and secrets at scale across AWS and SaaS estate.
• Secure AWS environments: IAM, network, logging, encryption, and workloads.
• Enforce secure tooling (GitHub Advanced Security, branch protections, CODEOWNERS).
• Evaluate vendor integrations for PHI handling and data loss prevention.
• Lead vulnerability management and penetration testing relations.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security architecture

Application security

AWS cloud security

Identity and access management

SAST/DAST tooling

GitHub Advanced Security/CodeQL

OAuth/OIDC

Okta

Python scripting

NIST CSF

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

GitHub Advanced Security

CodeQL

Secret scanning

SAST/DAST tooling

Cloud security tooling

Job description

Oshi Health, a remote-first healthcare platform, seeks a Senior Security Engineer to own security architecture and hands-on engineering across its SaaS/cloud environment. You’ll harden identity, protect PHI, and embed secure AI workflows from the ground up.

You’ll lead threat modeling, secure code reviews, and non-human identity management, partnering with a small cross-functional team to balance risk and velocity in a regulated healthcare context.