Senior Security Engineer - Remote Cloud & AppSec Lead

Oshi Health; Muncie (IN); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health seeks a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets, and embed security into engineering and AI workflows from the ground up, shaping how a growing healthcare platform stays safe as it adopts agentic AI development.

You will lead threat modeling, secure design reviews, and secure code reviews, while building scalable non-human identity management and robust

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong in identity and access management including Okta, OAuth/OIDC, SAML, MFA.
• Experience securing AI/LLM and agentic systems; risk-driven tradeoffs explained to engineers.
• Proficient with scripting and automation (Python and shell).

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for agentic software development lifecycle and controls.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end: IAM, network, logging, encryption, workload protection.
• Enforce tooling (CodeQL, secret scanning, push protection) and CODEOWNERS reviews.
• Review AI and vendor integrations touching PHI and assess data flows and retention.
• Own vulnerability management and penetration-testing relationships.
• Support HIPAA Security Rule technical safeguards and detection/response capabilities.

Skills

Secure SDLC tooling

IAM management

AI/LLM security

Scripting (Python)

Executive communication

Education

Bachelor's degree in CS or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Terraform

SAST/DAST tooling

Job description

Oshi Health seeks a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets, and embed security into engineering and AI workflows from the ground up, shaping how a growing healthcare platform stays safe as it adopts agentic AI development.

You will lead threat modeling, secure design reviews, and secure code reviews, while building scalable non-human identity management and robust