Senior Security Engineer — Cloud & AI (Remote)

Oshi Health; United States; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 holidays + floating holiday

401(k)

Remote-first

Equity

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, SaaS and cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and build security into engineering and AI workflows from the start.

This hands-on role requires 6+ years in security engineering with AWS experience and comfort as the sole security expert on a small team, able to explain tradeoffs to engineers and executives.

Qualifications

• Required Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience in healthcare, fintech, or another regulated data environment is a strong plus.
• Hands-on with SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong in identity management: Okta, OAuth/OIDC, SAML, MFA for non-human identities.
• Familiarity with securing AI/LLM and agentic systems and risk in data flows.
• Able to work as the sole security specialist on a small team and communicate tradeoffs clearly.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end: IAM, network, logging, encryption, workload protection.
• Enforce tooling like CodeQL, secret scanning, and branch protection with CODEOWNERS.
• Review AI and vendor integrations touching PHI for data flow and DLP needs.
• Own vulnerability management and penetration-testing relationships, driving fixes.
• Support HIPAA Security Rule safeguards and build automation for a lean security function.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Threat modeling

SAST/DAST tooling

Scripting (Python)

Okta/OAuth/OIDC

Non-human identities & secrets

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

GitHub Advanced Security

CodeQL

Secret scanning

SAST/DAST tooling

IAM tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, SaaS and cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and build security into engineering and AI workflows from the start.

This hands-on role requires 6+ years in security engineering with AWS experience and comfort as the sole security expert on a small team, able to explain tradeoffs to engineers and executives.