Senior Security Engineer - Remote, Cloud & AI Security

Oshi Health; Sacramento (CA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health Benefits

Flexible PTO

Remote-first work

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will focus on identity, secrets management, and secure development practices, shaping a remote-first security posture for a growing healthcare company.

You will implement risk-based security controls across AWS, CI/CD, and vendor integrations, and partner with engineering and product teams to protect PHI while enabling innovative AI-driven workflows.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands‑on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.
• Strong in identity and access management (Okta, OAuth/OIDC, SAML, MFA).
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, risk control.
• Comfortable being the sole security specialist on a small team and communicating tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting and automation (Python and shell).

Responsibilities

• Own application and product security, including threat modeling and secure design reviews.
• Design and own security architecture for the shift to an agentic SDLC with gate controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (CodeQL, secret scanning, branch protection, CODEOWNERS).
• Review AI and third-party vendor integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration-testing relations, drive findings to closure.
• Support HIPAA Security Rule safeguards and build automation for small security teams.

Skills

Security engineering

Cloud security (AWS)

Identity & access management

Secure SDLC tooling

Scripting (Python)

AI/LLM security

Articulating risk to execs

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

SAST/DAST

AWS

Terraform

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will focus on identity, secrets management, and secure development practices, shaping a remote-first security posture for a growing healthcare company.

You will implement risk-based security controls across AWS, CI/CD, and vendor integrations, and partner with engineering and product teams to protect PHI while enabling innovative AI-driven workflows.