Senior Security Engineer: Remote Cloud, AI & HIPAA SaaS

Oshi Health; Virginia; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% premiums)

Remote-first with US states coverage

Flexible PTO

401(k)

Meaningful equity

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This role is hands-on, focusing on secure architecture, identity management, and secure AI/ML integration across a remote-first environment.

You will shape security standards, harden secrets management, and embed security into engineering and AI workflows from the start, influencing risk-aware decisions with engineers and executives alike.

Qualifications

• 6+ years in security engineering with application/product and cloud (AWS) security.
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and supply-chain security.
• Strong IAM expertise including Okta, OAuth/OIDC, SAML, and MFA.
• Experience securing AI/LLM and agentic systems; risk-focused tradeoffs.
• Familiarity with HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in Python and shell scripting.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment including IAM, logging, encryption, and workload protection.
• Enforce tooling with GitHub Advanced Security, CODEOWNERS, and branch protection.
• Review AI and third-party vendor integrations touching PHI.
• Own vulnerability management and penetration-testing relationships.
• Support HIPAA Security Rule safeguards and detection/response capabilities.

Skills

Application security

Cloud security (AWS)

Secure SDLC tooling

IAM & access management

AI/LLM security

HIPAA/SOC2/NIST familiarity

Scripting (Python)

Security architecture

Regulated environments experience

Security certifications (OSCP/GIAC/CIS

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Okta

OAuth/OIDC

SAML

AWS

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This role is hands-on, focusing on secure architecture, identity management, and secure AI/ML integration across a remote-first environment.

You will shape security standards, harden secrets management, and embed security into engineering and AI workflows from the start, influencing risk-aware decisions with engineers and executives alike.