Senior Security Engineer - Remote, Cloud & AI Security

Oshi Health; Lansing (MI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first work

Bonus potential

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security architecture of its fully remote, cloud-native healthcare platform. You will harden identity and secrets management, influence AI/DevOps workflows, and implement robust security across SaaS and AWS environments.

You will lead threat modeling, secure design reviews, and vulnerability management while collaborating with a small cross-functional team to balance risk and speed in a healthcare setting.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands-on with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong in identity and access management including Okta, OAuth/OIDC, SAML.
• Familiarity with securing AI/LLM and agentic systems, risk awareness.
• Comfortable being the sole security specialist on a small team and communicating tradeoffs.
• Working knowledge of HIPAA Security Rule, SOC 2, NIST CSF.
• Proficient in scripting/automation (Python and at least one shell).

Responsibilities

• Own application and product security, threat modeling, secure design reviews.
• Design and own security architecture for agentic SDLC and controls.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end: IAM, network, logging, encryption.
• Enforce tooling: Code scanning, branch protection, CODEOWNERS reviews.
• Review AI/vendor integrations touching PHI for data flows and security.
• Own vulnerability management and penetration-testing relationships.
• Support HIPAA technical safeguards and detection/response capabilities.

Skills

Application security

AWS security

Identity & IAM

Scripting Python

Secure SDLC tooling

HIPAA/NIST knowledge

Threat modeling

Regulated environments

Education

Bachelor's degree

Tools

GitHub Advanced Security

CodeQL

SAST/DAST

Okta

OAuth/OIDC

Job description

Oshi Health is seeking a Senior Security Engineer to own the security architecture of its fully remote, cloud-native healthcare platform. You will harden identity and secrets management, influence AI/DevOps workflows, and implement robust security across SaaS and AWS environments.

You will lead threat modeling, secure design reviews, and vulnerability management while collaborating with a small cross-functional team to balance risk and speed in a healthcare setting.