Senior Security Engineer, Cloud & AI Security (Remote)

Oshi Health; Clifton (TX); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Time Off

Retirement

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security architecture, harden identity and secrets management, and bake security into engineering and AI workflows from day one.

You will supervise application and product security, model threats, review code, and enforce access control. The role involves building non-human identity systems, securing AWS environments, and guiding vulnerability

Qualifications

• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Experience in healthcare, fintech, or regulated data environments is a plus.
• SAST/DAST, GitHub Advanced Security, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection and access controls.
• Comfortable being the sole security specialist on a small cross-functional team.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting and automation (Python and shell).

Responsibilities

• Own application and product security, including threat modeling, secure design reviews, and secure code review.
• Design and own security architecture for an agentic SDLC with phase-gate criteria.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption, workload protection.
• Lead vulnerability management and drive closure with engineering teams.

Education

Bachelor's degree in Computer Science or equivalent

Tools

CodeQL

GitHub Advanced Security

Okta Certified Professional

Terraform

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security architecture, harden identity and secrets management, and bake security into engineering and AI workflows from day one.

You will supervise application and product security, model threats, review code, and enforce access control. The role involves building non-human identity systems, securing AWS environments, and guiding vulnerability