Senior Security Engineer - Cloud & AppSec for Healthcare

Oshi Health; Sacramento (CA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, protecting PHI and patient data. This hands-on role focuses on security architecture, identity and secrets management, and secure coding practices across our SaaS and AWS environment.

You will shape the security posture during our shift to agentic AI development, implement risk-based vulnerability management, and drive incident response with a small,

Qualifications

• 6+ years in security engineering with cloud security (AWS).
• Experience in healthcare, fintech, or regulated data environments is a plus.
• Hands-on with secure SDLC tooling and IAM practices.

Responsibilities

• Own application and product security, including threat modeling and design reviews.
• Design security architecture for agentic software development lifecycle.
• Build and run identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment: IAM, networking, logging, encryption, and workloads.
• Tighten security tooling: GitHub Advanced Security, branch protection, CODEOWNERS reviews.
• Review AI and vendor integrations for PHI handling and data flows.
• Own vulnerability management and remediation cycle.
• Support HIPAA Security Rule safeguards and detection/response capabilities.

Skills

Identity & access management

Secure SDLC tooling

Python scripting

Cloud security (AWS)

Threat modeling

Security architecture

Vulnerability management

AI/LLM security

Education

Bachelor's degree in Computer Science

Equivalent practical experience

Tools

Okta

OAuth/OIDC

SAML

GitHub Advanced Security

CodeQL

AWS IAM

SAST/DAST

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, protecting PHI and patient data. This hands-on role focuses on security architecture, identity and secrets management, and secure coding practices across our SaaS and AWS environment.

You will shape the security posture during our shift to agentic AI development, implement risk-based vulnerability management, and drive incident response with a small,