Senior Security Engineer - Cloud & AI Safety (Remote)

Oshi Health; Clifton (TX); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first culture

Competitive compensation and equity

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set architecture standards, fortify identity and secrets management, and bake security into engineering and AI workflows from the ground up.

You will own application and product security, threat modeling, secure design review, and secure code review, focusing on access-control and secrets-exposure risks for our member-facing APIs.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• ~6+ years in security engineering with depth in application/product and cloud security (AWS).
• Familiarity with securing AI/LLM and agentic systems (prompt injection, agent authorization).
• Experience in a small, cross-functional team as sole security specialist.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Responsibilities

• Own security architecture for the platform and guide secure design across teams.
• Own vulnerability management and penetration testing relationship, driving findings to closure.
• Oversee non-human identity and secrets management at scale across SaaS and AWS estate.
• Enforce security tooling (GitHub Advanced Security, CodeQL, secret scanning) and review processes for sensitive paths.

Skills

Security engineering

Application security

Cloud security (AWS)

Threat modeling

Secure code review

AI/LLM security

Scripting (Python)

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security/CodeQL

Secret scanning tools

Terraform

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set architecture standards, fortify identity and secrets management, and bake security into engineering and AI workflows from the ground up.

You will own application and product security, threat modeling, secure design review, and secure code review, focusing on access-control and secrets-exposure risks for our member-facing APIs.