Senior Security Engineer - Remote Cloud & AI in Health

Oshi Health; Virginia; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first with US states coverage

Competitive equity & bonus

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its cloud-native healthcare platform. You will design security architecture, harden identity management, and embed secure practices into AI/ML workflows from day one.

You will lead vulnerability management, perform risk-based tradeoffs with engineers and executives, and ensure HIPAA/SOC2-aligned controls across AWS services and third‑party integrations.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS). Regulated data environments preferred (healthcare/fintech).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.

Responsibilities

• Own application and product security, including threat modeling and secure code review with focus on access-control and secrets exposure.
• Design and own security architecture for the shift to agentic SDLC, with phase-gate criteria and tested clawback procedures.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure our AWS environment end-to-end including IAM, network segmentation, logging, encryption, and workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, branch protections, CODEOWNERS).
• Review AI and third-party integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration-testing relationship; drive findings to closure.
• Support HIPAA Security Rule safeguards and stand up detection/response automation.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity & access management

Scripting (Python)

Communication

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security/CodeQL

SAST/DAST tooling

Secret scanning

IAM (Okta, OAuth/OIDC, SAML)

Non-human identities & secrets management

Terraform/AWS security tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its cloud-native healthcare platform. You will design security architecture, harden identity management, and embed secure practices into AI/ML workflows from day one.

You will lead vulnerability management, perform risk-based tradeoffs with engineers and executives, and ensure HIPAA/SOC2-aligned controls across AWS services and third‑party integrations.