Senior Security Engineer — Remote, AI-Driven Cloud Health

Oshi Health; Wisconsin; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible remote work

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will shape secure design, implement identity and secrets management, and integrate security into AI/SDLC workflows.

This hands-on role requires deep expertise in cloud and application security, with a focus on protecting PHI and regulatory compliance, in a remote-friendly environment. You will work with a small, cross-functional team, partnering with engineering and product to embed

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field.
• 6+ years of security engineering with cloud security (AWS) focus.
• Hands-on with SAST/DAST, secret scanning, and supply‑chain security.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own the security architecture for the shift to an agentic SDLC.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end, including IAM, network, logging, encryption.
• Enforce and tune security tooling (CodeQL, secret scanning, protections).
• Review AI and vendor integrations touching PHI; evaluate data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships; drive remediation.
• Support HIPAA Security Rule technical safeguards and IR capabilities.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Scripting (Python & shell)

Stakeholder communication

Education

Bachelor's degree in Computer Science

Equivalent practical experience

Tools

SAST/DAST tools

GitHub Advanced Security/CodeQL

Secret scanning

Software supply‑chain security

AWS security tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will shape secure design, implement identity and secrets management, and integrate security into AI/SDLC workflows.

This hands-on role requires deep expertise in cloud and application security, with a focus on protecting PHI and regulatory compliance, in a remote-friendly environment. You will work with a small, cross-functional team, partnering with engineering and product to embed