Senior Security Engineer - Remote, Cloud & AI Security

Oshi Health; Baton Rouge (LA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first work style

Competitive equity and bonus potential

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. This hands-on role focuses on securing identity, secrets management, and security across engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure code review while hardening AWS security and implementing non-human identity controls. The position requires 6+ years in security engineering, with strong SAST/DAST tooling and IAM

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Strong in identity and access management, including Okta, OAuth/OIDC, SAML, phishing-resistant MFA, and non-human identities and secrets.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review, focusing on access-control and secrets-exposure flaws.
• Design and own security architecture for agentic software development lifecycle, with phase-gate criteria and out-of-band controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure our AWS environment end to end, including IAM, network segmentation, logging, encryption, and workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, push protection, CODEOWNERS enforcement).
• Review AI & third-party vendor integrations before they touch PHI, evaluating data flows & DLP needs.
• Own vulnerability management and penetration-testing relationships, drive findings to closure, feed back to development.
• Support HIPAA Security Rule technical safeguards, stand up detection and response capabilities.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity & access management

Okta

OAuth/OIDC

SAML

MFA

Secure SDLC tooling

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

Python scripting

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Okta

OAuth/OIDC

SAML

Job description

Oshi Health seeks a Senior Security Engineer to own the security of its fully remote, cloud-native healthcare platform. This hands-on role focuses on securing identity, secrets management, and security across engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure code review while hardening AWS security and implementing non-human identity controls. The position requires 6+ years in security engineering, with strong SAST/DAST tooling and IAM