Senior Security Engineer - Remote, AI-Driven Cloud Security

Oshi Health; Indianapolis (IN); A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Flexible PTO

401(k) retirement

Descripción de la vacante

Oshi Health seeks a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, from identity management to secure development practices.

You’ll drive threat modeling, security architecture, vulnerability management, and vendor reviews in a small, cross‑functional team, with emphasis on protecting PHI and meeting HIPAA, SOC 2, and NIST standards.

Formación

• Bachelor's degree in CS or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SDLC tooling and IAM management.
• Experience in healthcare/regulated data environments is a plus.

Responsabilidades

• Own application and product security, including threat modeling and secure code reviews.
• Design security architecture for cloud adoption and AI workflows.
• Build and manage non-human identities, tokens, and credentials.
• Secure AWS environment: IAM, networking, logging, encryption.
• Safeguard with CODEOWNERS, GitHub Security features, and branch protections.
• Review AI integrations for PHI data, retention, and DLP needs.
• Lead vulnerability management and penetration-testing relationships.
• Support HIPAA Security Rule safeguards and detection/response automation.

Conocimientos

Security engineering

IAM management

Secure SDLC tooling

Python scripting

Compliance awareness

Cloud security

Educación

Bachelor's degree in Computer Science or equivalent

Herramientas

SAST/DAST tooling

GitHub Advanced Security/CodeQL

Secret scanning

Software supply-chain security

Descripción del empleo

Oshi Health seeks a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform, from identity management to secure development practices.

You’ll drive threat modeling, security architecture, vulnerability management, and vendor reviews in a small, cross‑functional team, with emphasis on protecting PHI and meeting HIPAA, SOC 2, and NIST standards.