Senior Security Engineer — Cloud & AI (Remote)

Oshi Health; Wilmington (VT); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You’ll shape security architecture, manage identity and secrets, and embed security into engineering and AI workflows from day one.

You’ll secure AWS, enforce robust tooling, review AI/vendor integrations touching PHI, and lead vulnerability management with a pragmatic risk-based approach for a rapidly growing health-tech company.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong in identity and access management, including Okta, OAuth/OIDC, SAML, MFA, and non-human identities.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, and risk management.
• Comfortable being the sole security specialist on a small team and explaining tradeoffs to engineers and execs.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting and automation (Python and at least one shell).

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end including IAM, network, logging, and encryption.
• Enforce and tune security tooling like GitHub Advanced Security and CODEOWNERS reviews.
• Review AI and vendor integrations touching PHI for data flow and risk.
• Own vulnerability management and penetration-testing relations, driving findings to closure.
• Support HIPAA safeguards and stand up detection/response capabilities.

Skills

Security engineering

Application security

Cloud security (AWS)

Threat modeling

Secure SDLC tooling

Identity and access management

Non-human identities & secrets

AI/LLM security

Scripting (Python)

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Terraform

AWS

Okta

Job description

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You’ll shape security architecture, manage identity and secrets, and embed security into engineering and AI workflows from day one.

You’ll secure AWS, enforce robust tooling, review AI/vendor integrations touching PHI, and lead vulnerability management with a pragmatic risk-based approach for a rapidly growing health-tech company.