Senior Security Engineer - Healthcare SaaS & AI Security

Oshi Health; Indiana; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first with US-wide eligibility

Bonus and meaningful equity

Paid time off + holidays

401(k) retirement plan

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform, setting architecture standards, hardening identity and secrets, and embedding security into engineering and AI workflows from day one.

You will secure our AWS environment, enforce tooling, review AI integrations touching PHI, and drive vulnerability management while aligning with HIPAA, SOC 2, and NIST guidelines in a small, fast-moving team.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS) and application security.
• Hands-on with SDLC tooling: SAST/DAST, secret scanning, and software supply-chain security.
• Strong in IAM including Okta, OAuth/OIDC, SAML, and MFA.
• Experience securing AI/LLM and agentic systems and related risks.
• Able to explain tradeoffs to engineers and executives in a small team.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in Python and shell scripting.

Responsibilities

• Own application and product security with threat modeling and secure design reviews.
• Design security architecture for AI-enabled software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment across IAM, networking, logging, and encryption.
• Enforce security tooling (CodeQL, secret scanning, pushes, CODEOWNERS).
• Review AI and third-party vendor integrations touching PHI.
• Own vulnerability management and penetration testing relationships.
• Support HIPAA Security Rule technical safeguards and detection/response capabilities.

Skills

Cloud security (AWS)

Identity and access management

SAST/DAST tooling

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

Scripting (Python)

Shell scripting

AI/LLM security

Education

Bachelor's degree in Computer Science or equivalent

Tools

Okta

OAuth/OIDC

SAML

AWS

GitHub Advanced Security

Job description

Oshi Health seeks a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform, setting architecture standards, hardening identity and secrets, and embedding security into engineering and AI workflows from day one.

You will secure our AWS environment, enforce tooling, review AI integrations touching PHI, and drive vulnerability management while aligning with HIPAA, SOC 2, and NIST guidelines in a small, fast-moving team.