Senior Security Engineer (Remote) – Cloud, AI & HIPAA

Oshi Health; Baltimore (MD); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first culture

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. This hands-on role builds security into engineering and AI workflows from the start, setting architecture standards and hardening identity/secrets management.

You will work with a small, cross-functional team to drive threat modeling, secure design reviews, and vulnerability management across the AWS stack, while ensuring HIPAA/compliance and data protection.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong in IAM including Okta, OAuth/OIDC, SAML, MFA, non-human identities.
• Familiar with securing AI/LLM and agentic systems; risk-aware and able to communicate trade-offs.
• Able to work as the sole security specialist on a small, cross-functional team.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient with Python and shell scripting.

Responsibilities

• Own application and product security, including threat modeling and secure design reviews.
• Design and own security architecture for agentic SDLC and cloud environment.
• Build and run non-human identity and secrets management at scale across AWS.
• Secure AWS environment: IAM, network, logging, encryption, workload protection.
• Enforce security tooling: GitHub Security, branch protection, CODEOWNERS.
• Review AI/vendor integrations touching PHI and assess data flows and DLP needs.
• Own vulnerability management and drive findings to closure.
• Support HIPAA Security Rule technical safeguards and detection/response automation.

Skills

Application security

Cloud security (AWS)

Secure SDLC tooling

Identity and access management

AI/LLM security

Vulnerability management

Scripting and automation (Python)

Communication to engineers and execs

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security/CodeQL

Okta

Terraform

OAuth/OIDC/SAML

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. This hands-on role builds security into engineering and AI workflows from the start, setting architecture standards and hardening identity/secrets management.

You will work with a small, cross-functional team to drive threat modeling, secure design reviews, and vulnerability management across the AWS stack, while ensuring HIPAA/compliance and data protection.