Senior Security Engineer: Remote AI/Cloud Security Architect

Oshi Health; Atlanta (GA); A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Flexible PTO

401(k)

Remote-friendly

Descripción de la vacante

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and weave security into engineering and AI workflows from the start.

This hands-on role focuses on application and cloud security, SAST/DAST, IAM, and risk-aware tradeoffs, with remote-first work across approved US states. You will drive security in a small, cross-functional team.

Formación

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands‑on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.
• Strong in identity and access management (Okta, OAuth/OIDC, SAML, MFA) and non-human identities management.
• Experience securing AI/LLM/agentic systems, including prompt injection and model risk.
• Comfortable as the sole security expert on a small team and able to explain tradeoffs to engineers and executives.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and shell).

Responsabilidades

• Own application and product security including threat modeling and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end (IAM, network seg, logging, encryption).
• Enforce and tune security tooling (CodeQL, secret scanning, push protection).
• Review AI/3rd-party vendor integrations touching PHI; evaluate data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships; drive closure.
• Support HIPAA technical safeguards and build automation for a lean security function.

Conocimientos

Security engineering

Application security

Cloud security (AWS)

Identity & access mgmt

SAST/DAST

GitHub Advanced Security

CodeQL

Secret scanning

AI/LLM security

Educación

Bachelor's degree in CS

Herramientas

GitHub

Terraform

AWS

Descripción del empleo

Oshi Health is seeking a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and weave security into engineering and AI workflows from the start.

This hands-on role focuses on application and cloud security, SAST/DAST, IAM, and risk-aware tradeoffs, with remote-first work across approved US states. You will drive security in a small, cross-functional team.