Senior Security Engineer — Remote-First Cloud & AI Security

Oshi Health; Nashville (TN); A distancia; USD 170.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Salary: 170000–190000 USD per year

Health benefits and equity potential

Flexible PTO and 11 holidays

Descripción de la vacante

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role centers on securing applications, APIs, and AI-enabled workflows within a remote-first, US-wide team.

You will implement secure SDLC practices, manage non-human identities, and harden the AWS environment while coordinating with developers and executives on risk tradeoffs.

Formación

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with deep expertise in application/product security and cloud security (AWS).
• Hands‑on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply‑chain security.
• Strong identity and access management knowledge: Okta, OAuth/OIDC, SAML, MFA, and non‑human identities management.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and risk considerations.
• Comfortable as the sole security expert on a small, cross‑functional team and able to explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and at least one shell).

Responsabilidades

• Own application and product security, focusing on access-control and secrets exposure risks in a healthcare app and APIs.
• Design and own security architecture for the shift to agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, branch protection, CODEOWNERS).
• Review AI and third‑party vendor integrations before touching PHI; assess data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships and drive findings to closure.
• Support HIPAA Security Rule safeguards and stand up detection/response capabilities.

Conocimientos

Security engineering

Application security

Cloud security (AWS)

Identity and access management

Scripting & automation (Python)

AI/LLM security

Security architecture

Communication of tradeoffs

Educación

Bachelor's degree in Computer Science or equivalent

Herramientas

GitHub Advanced Security

CodeQL

SAST/DAST tooling

Secret scanning

Okta

Descripción del empleo

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. This hands-on role centers on securing applications, APIs, and AI-enabled workflows within a remote-first, US-wide team.

You will implement secure SDLC practices, manage non-human identities, and harden the AWS environment while coordinating with developers and executives on risk tradeoffs.