Senior Security Engineer: Cloud & AI Safeguards (Remote)

Oshi Health; Michigan; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-friendly

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform protecting PHI. You’ll shape security architecture, manage identities and secrets, and weave security into AI/ML workflows from day one.

As the first dedicated security engineer, you’ll work hands-on to harden systems, enforce access controls, and build robust detection and response capabilities, all while aligning with HIPAA and cloud best practices.

Qualifications

• Bachelor's degree in CS or equivalent practical experience.
• 6+ years in security engineering with AWS cloud security.
• Hands-on with SAST/DAST and GitHub Advanced Security/CodeQL.
• Strong IAM including Okta, OAuth/OIDC, SAML, MFA, and non-human identities.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review, focusing on access-control and secrets exposure.
• Design and own security architecture for the shift to an agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end to end, including IAM, networking, logging, encryption, and workload protection.
• Enforce and tune security tooling (CodeQL, secret scanning, branch protection, CODEOWNERS).
• Review AI and third-party vendor integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships, driving findings to closure.
• Support HIPAA Security Rule safeguards and build automation for a lean security function.

Skills

Security engineering

Application security

Cloud security

Identity access management

Python scripting

Shell scripting

Security tooling

Education

Bachelor's degree in CS

Tools

GitHub Advanced Security

CodeQL

SAST/DAST

Secret scanning

Job description

Oshi Health seeks a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform protecting PHI. You’ll shape security architecture, manage identities and secrets, and weave security into AI/ML workflows from day one.

As the first dedicated security engineer, you’ll work hands-on to harden systems, enforce access controls, and build robust detection and response capabilities, all while aligning with HIPAA and cloud best practices.