Senior Security Engineer — Healthcare SaaS & AI

Oshi Health; Ohio; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You’ll shape architecture, harden identity/secrets, and weave security into our AI-enabled development lifecycle from day one.

You’ll lead threat modeling, secure design reviews, and non‑human identity management across SaaS and AWS, while driving vendor risk and HIPAA‑aligned safeguards with cross‑functional colleagues.

Qualifications

• Bachelor’s degree in CS or equivalent practical experience.
• 6+ years in security engineering with AWS cloud security experience.
• Hands-on with SAST/DAST, CodeQL, secret scanning and software supply-chain security.
• Strong IAM knowledge (Okta, OAuth/OIDC, SAML, MFA).
• Familiar with securing AI/LLM and agentic systems.
• Able to explain tradeoffs clearly to engineers and executives.
• Knowledge of HIPAA, SOC 2, and NIST CSF.
• Scripting in Python and at least one shell.

Responsibilities

• Own application and product security, including threat modeling and secure design review.
• Design and own security architecture for the agentic SDLC and risk controls.
• Build and run identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption.
• Enforce and tune security tooling (CodeQL, secret scanning, push protection).
• Review AI and third-party vendor integrations touching PHI.
• Own vulnerability management and pen-testing follow‑ups.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Application security

AWS security

IAM

Scripting (Python)

Shell scripting

Secure SDLC tooling

Threat modeling

Code review

Vulnerability management

Education

Bachelor's degree

Tools

GitHub Advanced Security

CodeQL

SAST/DAST

Terraform

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You’ll shape architecture, harden identity/secrets, and weave security into our AI-enabled development lifecycle from day one.

You’ll lead threat modeling, secure design reviews, and non‑human identity management across SaaS and AWS, while driving vendor risk and HIPAA‑aligned safeguards with cross‑functional colleagues.