Senior Security Engineer - Cloud & AI Security Leader

Oshi Health; Springfield (IL); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Health benefits

Equity participation

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its cloud-native healthcare platform. You will shape security architecture, harden identity/secrets management, and embed security into engineering from the start.

You will be the sole security expert on a small, cross-functional team, protecting PHI, leading vulnerability response, and guiding vendor security. This role is remote-first within approved US states.

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field.
• 6+ years in security engineering with cloud security (AWS) and product security experience.
• Hands-on with secure SDLC tooling (SAST/DAST, CodeQL, secret scanning).
• Strong in IAM (Okta, OAuth/OIDC, SAML, MFA) and non-human identities/secrets management.
• Familiarity with securing AI/LLM and agentic systems; risk-focused decision making.
• Proven ability to work independently as the sole security expert in a small team.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting and automation (Python and shell).

Responsibilities

• Own application and product security with threat modeling and secure code reviews.
• Design security architecture for agentic software development lifecycle and risk controls.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment including IAM, networking, logging, and encryption.
• Enforce and tune security tooling (GitHub Advanced Security, CODEOWNERS).
• Review AI/third-party integrations for PHI handling and data flows.
• Own vulnerability management and vulnerability remediation processes.
• Support HIPAA safeguards and build detection and response capabilities.

Skills

Security engineering

Cloud security (AWS)

Identity and access management

Scripting (Python)

Automation / DevSecOps tooling

SAST/DAST tooling

Education

Bachelor's degree in Computer Science or equivalent

Tools

AWS

GitHub Advanced Security

Secret scanning tooling

Terraform

Okta

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its cloud-native healthcare platform. You will shape security architecture, harden identity/secrets management, and embed security into engineering from the start.

You will be the sole security expert on a small, cross-functional team, protecting PHI, leading vulnerability response, and guiding vendor security. This role is remote-first within approved US states.