Senior Security Engineer — Cloud & AI Security (Remote)

Oshi Health; Annapolis (MD); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

This hands-on role requires your experience in application security, AWS, and secure SDLC tooling to protect PHI and scale security as the platform grows. Remote-first with US-wide eligibility.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SDLC tooling: SAST/DAST, CodeQL, secret scanning.
• Strong IAM experience: Okta, OAuth/OIDC, SAML, MFA.
• Knowledge of HIPAA, SOC 2, NIST CSF.

Responsibilities

• Own application and product security, with focus on access-control and secret exposure.
• Design security architecture for agentic SDLC and AI workflows.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment: IAM, networking, logging, encryption.
• Enforce security tooling: CodeQL, secret scanning, branch protection.
• Review AI and vendor integrations touching PHI for data risk.
• Own vulnerability management and pentest relationships.
• Support HIPAA safeguards and detection/response automation.

Skills

Application security

AWS security

IAM

SAST/DAST

CodeQL

GitHub Advanced Security

Automation

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

This hands-on role requires your experience in application security, AWS, and secure SDLC tooling to protect PHI and scale security as the platform grows. Remote-first with US-wide eligibility.