Senior Security Engineer — Remote AI-Driven Healthcare SaaS

Oshi Health; California City (CA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Bonus program

Equity

Remote-first

Health benefits

Job summary

Oshi Health in the United States is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will shape security architecture, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

As the first dedicated security engineer, you will lead threat modeling, secure code review, and compliance with HIPAA/SOC2 while collaborating with a small, cross-functional team.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong in identity and access management: IAM, OAuth/OIDC, SAML, MFA.
• Experience securing AI/LLM/agentic systems and vendor integrations.
• Comfortable being the sole security specialist on a small cross-functional team.
• Familiarity with HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and shell).

Responsibilities

• Own application and product security including threat modeling and secure code reviews.
• Design and own security architecture for AI/agentic SDLC.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end including IAM, networking, logging, encryption.
• Enforce and tune security tooling (CodeQL, secret scanning, branch protection).
• Review AI and vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and remediation, feed findings back to development.
• Support HIPAA Security Rule technical safeguards and detection/response capabilities.

Skills

Security engineering

Application security

Cloud security AWS

IAM

SAST/DAST tooling

GitHub Sec

Python scripting

Shell scripting

Education

Bachelor's degree in CS

Tools

GitHub CodeQL

AWS

Terraform

Okta

OAuth/OIDC

Job description

Oshi Health in the United States is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will shape security architecture, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

As the first dedicated security engineer, you will lead threat modeling, secure code review, and compliance with HIPAA/SOC2 while collaborating with a small, cross-functional team.