Senior Security Engineer - Cloud & App Security, Remote

Oshi Health; Town of King (WI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first work

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our completely remote, cloud-native healthcare platform. You will set architecture standards, harden identity and secrets, and embed security into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and secure code reviews for a patient-facing app and APIs, while shaping the shift to an agentic development lifecycle and scalable non-human identity management.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with focus on application/product security and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security and secret scanning.
• Strong in IAM including Okta, OAuth/OIDC, SAML, MFA, and non-human identities.

Responsibilities

• Own application and product security incl. threat modeling and secure code review.
• Design security architecture for agentic SDLC and governance criteria.
• Manage non-human identity and secrets across SaaS and AWS estate.
• Secure AWS environment with IAM, networking, logging, encryption, and workload protection.
• Tune security tooling (CodeQL, secret scanning, branch protection, CODEOWNERS).
• Evaluate data flows in third-party AI/vendor integrations touching PHI.
• Lead vulnerability management and pen-testing collaboration.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Application security

Cloud security (AWS)

Identity & access management

Secure SDLC tooling

Security architecture

AI/LLM security

Communication with executives

Python / scripting

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

SAST/DAST

Secret scanning

AWS

Terraform

Okta

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our completely remote, cloud-native healthcare platform. You will set architecture standards, harden identity and secrets, and embed security into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and secure code reviews for a patient-facing app and APIs, while shaping the shift to an agentic development lifecycle and scalable non-human identity management.