Senior Security Engineer - Remote Cloud & AI Security

Oshi Health; Vermont; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote‑first

Flexible PTO

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

This hands-on role requires threat modeling, secure code reviews, IAM design, and coordination with engineering to scale security across AWS, Terraform, and our vendor integrations while maintaining HIPAA compliance.

Qualifications

• Bachelor's degree in CS or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).Healthcare/regulated data experience is a plus.
• Hands-on with SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM knowledge: Okta, OAuth/OIDC, SAML, MFA, non-human identities management.
• Experience securing AI/LLM and agentic systems: prompt injection, agent authorization, risk.
• Ability to operate as sole security expert in a small cross-functional team, explaining tradeoffs.

Responsibilities

• Own application and product security, including threat modeling and secure design review.
• Design and own security architecture for agentic SDLC and phased gate criteria.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end to end: IAM, network, logging, encryption, workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, CODEOWNERS, branch protection).
• Review AI and third‑party vendor integrations touching PHI; assess data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships, driving fixes.
• Support HIPAA Security Rule safeguards and automated detection/response capabilities.

Skills

Security engineering

Application security

Cloud security (AWS)

Scripting (Python)

Automation

Education

Bachelor's degree in Computer Science or equivalent

Tools

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Software supply‑chain security

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

This hands-on role requires threat modeling, secure code reviews, IAM design, and coordination with engineering to scale security across AWS, Terraform, and our vendor integrations while maintaining HIPAA compliance.