Senior Security Engineer - Remote Healthcare Cloud Security

Oshi Health; Arizona; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-friendly

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of a remote-first healthcare platform. You’ll harden identity and secrets management, secure the SaaS/AWS stack, and integrate security into AI development from the ground up.

You’ll lead threat modeling, secure coding reviews, and vulnerability management while guiding a small cross‑functional team. Strong Python scripting and modern IAM are essential.

Qualifications

• Bachelor’s degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with SAST/DAST, secret scanning, and software supply‑chain security.
• Identity and access management with Okta, OAuth/OIDC, and MFA.
• Experience securing AI/LLM and agentic systems and risk tradeoffs.
• Familiarity with HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting and automation (Python).

Responsibilities

• Own application and product security, including threat modeling and secure code reviews.
• Design security architecture for an agentic SDLC and trusted AI workflows.
• Build non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment with IAM, networking, logging, and encryption.
• Enforce security tooling (CodeQL, secret scanning, CODEOWNERS) across paths.
• Review AI/vendor data flows and DLP needs before touch PHI.
• Lead vulnerability management and pen‑testing relationships.
• Support HIPAA safeguards and build detection/response automation.

Skills

Application security

Cloud security (AWS)

Identity and access management

Secure SDLC tooling

Scripting (Python)

Automation

HIPAA/SOC 2/NIST familiarity

Education

Bachelor's degree in Computer Science or equivalent

Certifications (OSCP, GIAC, CISSP, AWS Security)

Tools

GitHub Advanced Security

CodeQL

Okta, OAuth/OIDC, SAML

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of a remote-first healthcare platform. You’ll harden identity and secrets management, secure the SaaS/AWS stack, and integrate security into AI development from the ground up.

You’ll lead threat modeling, secure coding reviews, and vulnerability management while guiding a small cross‑functional team. Strong Python scripting and modern IAM are essential.