Senior Security Engineer - Cloud & AI Security (Remote)

Oshi Health; Virginia Beach (VA); Remote; USD 170,000 - 190,000; Full time

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will shape security architecture, harden identity and secrets management, and embed security into our engineering and AI workflows from day one.

You’ll work hands-on in a remote-first environment, collaborating with a small cross-functional team to protect PHI, implement robust vulnerability management, and ensure HIPAA and NIST-aligned safeguards across AWS services, CI/CD, and

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with cloud security experience.
• Experience with SAST/DAST and GitHub Advanced Security/CodeQL.
• Proficient scripting in Python and shell.

Responsibilities

• Own application and product security, focusing on access-control and secrets exposure.
• Design security architecture for agentic software development lifecycle.
• Build non-human identity and secrets management at scale.
• Secure AWS environment including IAM, networking, logging, and encryption.
• Enforce security tooling: CodeQL, secret scanning, branch protection, CODEOWNERS.
• Review AI and vendor integrations touching PHI for risk.
• Own vulnerability management and pen-testing relationship.
• Support HIPAA Security Rule safeguards and detection/response capabilities.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Secure SDLC tooling

Python scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Okta

OAuth/OIDC

SAML

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will shape security architecture, harden identity and secrets management, and embed security into our engineering and AI workflows from day one.

You’ll work hands-on in a remote-first environment, collaborating with a small cross-functional team to protect PHI, implement robust vulnerability management, and ensure HIPAA and NIST-aligned safeguards across AWS services, CI/CD, and