Senior Security Engineer — Remote, Cloud & AI Security

Oshi Health; Charlotte (NC); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first flexibility

401(k) retirement plan

Flexible PTO + holidays

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will define security architecture, strengthen identity and secrets management, and weave security into engineering and AI workflows from the start.

This hands-on role requires building security into our SaaS stack, AWS environments, and CI/CD pipelines, while protecting PHI and complying with HIPAA Security Rule and related standards.

Qualifications

• Bachelor's degree or equivalent practical experience in CS or related field.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling (SAST/DAST, secret scanning).
• Experience with IAM/OAuth/OIDC/SAML/MFA and non-human identities management.

Responsibilities

• Own application and product security with threat modeling and secure design/code reviews focusing on access-control and secrets exposure in healthcare app APIs.
• Design and own security architecture for agentic SDLC, with phase-gate criteria and out-of-band controls for AI-written code security.
• Build and run non-human identity and secrets management across SaaS and AWS estate.
• Secure AWS environment: IAM, networking, logging, encryption, workload protection (S3, EKS, Terraform).
• Enforce security tooling (GitHub Advanced Security, CodeQL, secret scanning), branch protection, CODEOWNERS enforced reviews on sensitive paths.
• Review AI/3rd-party vendor integrations touching PHI, assess data flows, retention, and DLP needs.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Scripting (Python)

AI/LLM security

HIPAA & compliance awareness

Communication of risk to executives

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

GitHub Advanced Security

CodeQL

Secret scanning tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will define security architecture, strengthen identity and secrets management, and weave security into engineering and AI workflows from the start.

This hands-on role requires building security into our SaaS stack, AWS environments, and CI/CD pipelines, while protecting PHI and complying with HIPAA Security Rule and related standards.