Senior Security Engineer – Remote AWS & AI Security

Oshi Health; Wilmington (VT); A distancia; USD 170.000 - 190.000; Jornada completa

Descripción de la vacante

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into our engineering and AI workflows from the start.

You will build security into AWS, CI/CD tooling, and PHI handling, working as the sole security expert on a small team to enable a secure, compliant product.

Formación

• Bachelor's degree in CS or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.
• Strong in identity and access management, including Okta, OAuth/OIDC, SAML, phishing-resistant MFA, and non-human identities management.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and risk.
• Comfortable being the sole security specialist on a small, cross-functional team, prioritizing ruthlessly by risk.
• Working knowledge of the HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Responsabilidades

• Own application and product security, including threat modeling and secure code review, focusing on access-control and secrets exposure.
• Design and own security architecture for agentic software development lifecycle and phase-gate criteria.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, CODEOWNERS).
• Review AI and third‑party vendor integrations touching PHI, evaluating data flows and DLP needs.
• Own vulnerability management and penetration-testing relations, drive findings to closure.
• Support HIPAA Security Rule tech safeguards and detection/response capabilities.

Conocimientos

Security engineering

Application security

Cloud security (AWS)

Identity & access management

Scripting (Python)

Security tooling

HIPAA knowledge

NIST CSF

AI/LLM security

Educación

Bachelor's degree in Computer Science

Herramientas

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Software supply-chain security

Descripción del empleo

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into our engineering and AI workflows from the start.

You will build security into AWS, CI/CD tooling, and PHI handling, working as the sole security expert on a small team to enable a secure, compliant product.