Senior Security Engineer — Cloud & AI Security (Remote)

Oshi Health; Minnesota; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 holidays and 1 floating holiday

401(k) eligibility

Remote-first flexibility

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role builds security into engineering and AI workflows, shaping architecture, identity and secrets management, and risk controls across the AWS stack.

You’ll work in a remote-first environment across the US, collaborating with product and engineering to protect PHI, drive vulnerability management, and scale HIPAA safeguards for growth.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with deep application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, CodeQL, secret scanning, and supply-chain security.
• Strong in identity and access management including Okta, OAuth/OIDC, SAML, MFA, and non-human identities.
• Familiarity with securing AI/LLM/agentic systems, risk, and data protection.
• Able to be the sole security specialist on a small cross-functional team, communicating tradeoffs clearly.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient with Python and shell scripting.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review for a healthcare app and APIs.
• Design and own security architecture for the shift to an agentic SDLC with phase-gate criteria and out-of-band controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure our AWS environment end to end: IAM, network segmentation, logging, encryption, and workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, push protection, CODEOWNERS reviews).
• Review AI and vendor integrations before they touch PHI, evaluating data flows and DLP needs.
• Own vulnerability management and the penetration-testing relationship, driving findings to closure.
• Support HIPAA Security Rule technical safeguards and build automation for a lean security function.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Secure SDLC tooling

Python scripting

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security/CodeQL

Secret scanning tools

SAST/DAST tooling

Job description

Oshi Health seeks a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role builds security into engineering and AI workflows, shaping architecture, identity and secrets management, and risk controls across the AWS stack.

You’ll work in a remote-first environment across the US, collaborating with product and engineering to protect PHI, drive vulnerability management, and scale HIPAA safeguards for growth.