Senior Security Engineer – Cloud & AI Security (Remote)

Oshi Health; Alton (IL); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) retirement plan

Meaningful equity

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our cloud-native, SaaS healthcare platform. This hands-on role focuses on building security into engineering and AI workflows, with emphasis on access control and secrets management across AWS and our systems.

You will drive threat modeling, secure design reviews, and secure code review, collaborating with cross-functional teams to protect PHI and ensure compliance.

Qualifications

• ~6+ years in security engineering with depth in application/product security and cloud security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, NHI sprawl, and model/supply-chain risk.
• Working knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).
• Experience in healthcare, fintech, or another regulated, data-sensitive environment is a strong plus.

Responsibilities

• Own security architecture for AWS, IAM, network segmentation, logging, encryption, and workload protection.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Review AI and third-party vendor integrations touching PHI for data flows and data loss prevention.
• Manage vulnerability management and penetration-testing relationships; drive findings to closure.
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, push protection) and secure review processes.
• Design security for agentic software development lifecycle with phase-gate criteria and clawback procedures.

Skills

Security engineering

Cloud security

AI/LLM security

Scripting Python

Executive communication

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our cloud-native, SaaS healthcare platform. This hands-on role focuses on building security into engineering and AI workflows, with emphasis on access control and secrets management across AWS and our systems.

You will drive threat modeling, secure design reviews, and secure code review, collaborating with cross-functional teams to protect PHI and ensure compliance.