Senior Security Engineer, Remote-First: App & Cloud Security

Oshi Health; Athens (GA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Bonus + equity

Remote-first

Flexible PTO

401(k)

Job summary

Oshi Health is hiring a Senior Security Engineer to own the technical security of our remote, cloud‑native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure code reviews while shaping the agentic software development lifecycle and managing non‑human identities at scale.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud and application security.
• Hands-on with SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Strong IAM skills: Okta, OAuth/OIDC, SAML, MFA, non-human identities.
• Familiarity with securing AI/LLM and agentic systems.
• Ability to explain tradeoffs to engineers and executives.
• Knowledge of HIPAA Security Rule, SOC 2, NIST CSF.
• Proficient in Python and shell scripting.

Responsibilities

• Own application and product security, focusing on access and secrets flaws.
• Design security architecture for an agentic software lifecycle.
• Build non-human identity and secrets management at scale.
• Secure AWS environment: IAM, networking, logging, encryption, workloads.
• Enforce security tooling, CODEOWNERS reviews, and guardrails.
• Review AI/third-party integrations for PHI and data flows.
• Own vulnerability management and pen-test relationships.
• Support HIPAA safeguards and build detection/response automation.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity & access management

Scripting & automation

AI/LLM security

Risk prioritization

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

SAST/DAST tooling

Okta

Job description

Oshi Health is hiring a Senior Security Engineer to own the technical security of our remote, cloud‑native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure code reviews while shaping the agentic software development lifecycle and managing non‑human identities at scale.