Senior Security Engineer — Cloud & AI Security (Remote)

Oshi Health; Idaho Falls (ID); A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Remote-first flexibility

Flexible PTO + holidays

401(k)

Descripción de la vacante

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and build security into our engineering workflows from the start.

This hands-on role requires collaboration with a small team and expertise in AWS security, IAM, SAST/DAST, and AI/LLM risk, with the ability to explain tradeoffs to engineers and executives.

Formación

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong in identity and access management (Okta, OAuth/OIDC, SAML, MFA).
• Experience securing AI/LLM/agentic systems and risk.
• Able to explain tradeoffs to engineers and executives.
• Familiarity with HIPAA SOC 2 and NIST CSF.
• Scripting and automation in Python and shell.

Responsabilidades

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for the shift to an agentic SDLC with governance.
• Build non-human identity and secrets management at scale.
• Secure AWS environment end-to-end including IAM and network segmentation.
• Enforce security tooling like GitHub Advanced Security and CODEOWNERS reviews.
• Review AI and vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and penetration-testing relationships.
• Support HIPAA security safeguards and incident detection/response automation.

Conocimientos

Security engineering

Application security

Cloud security

SAST/DAST

CodeQL

Secret scanning

IAM

OAuth/OIDC

SAML

MFA

Python

Shell scripting

Educación

Bachelor's degree in CS

Herramientas

GitHub Advanced Security

Terraform

AWS

Descripción del empleo

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and build security into our engineering workflows from the start.

This hands-on role requires collaboration with a small team and expertise in AWS security, IAM, SAST/DAST, and AI/LLM risk, with the ability to explain tradeoffs to engineers and executives.