Senior Security Engineer - Remote, Cloud & AI (Healthcare)

Oshi Health; New York (NY); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Bonus

Equity

Remote-first

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets, and integrate security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and automated controls across the SaaS environment, while aligning with HIPAA and NIST frameworks and collaborating with a small cross-functional team.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong identity & access management experience including Okta, OAuth/OIDC, SAML, MFA.
• Experience securing AI/LLM and agentic systems and risk management.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for agentic software development lifecycle and risk controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, network, logging, encryption, workload protection.
• Enforce security tooling like GitHub Advanced Security, branch protection, CODEOWNERS reviews.
• Evaluate AI integrations for PHI handling and data-loss prevention.
• Own vulnerability management and penetration-testing relationships; drive fixes.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Application security

Cloud security AWS

Identity & access management

Scripting Python

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning tools

Okta authentication tooling

Job description

Oshi Health seeks a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You will set security standards, harden identity and secrets, and integrate security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and automated controls across the SaaS environment, while aligning with HIPAA and NIST frameworks and collaborating with a small cross-functional team.