Senior Security Engineer — Remote Healthcare SaaS

Oshi Health; Florida; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% premiums)

Flexible PTO

401(k) retirement plan

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will harden identity, manage secrets, and embed security across engineering and AI workflows from the start.

The role emphasizes hands-on architecture, threat modeling, and pragmatic risk management within a small cross-functional team, with remote-first flexibility across approved US states.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security.
• Strong IAM knowledge: Okta, OAuth/OIDC, SAML, MFA, and non-human identities/secrets.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, and risk.
• Comfort as sole security specialist on a small, cross-functional team, able to explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient in scripting/automation (Python and at least one shell).

Responsibilities

• Own security of the fully remote, cloud-native healthcare platform and its APIs.
• Design and enforce security architecture for the shift to AI-driven software development.
• Build and operate non-human identity and secrets management at scale.
• Secure AWS environment end-to-end: IAM, network segmentation, encryption, logging.
• Tune tooling (CodeQL, secret scanning, CODEOWNERS) to enforce security.
• Evaluate AI/third-party integrations touching PHI for data flows and retention.
• Lead vulnerability management and drive remediation in development cycles.
• Support HIPAA Security Rule safeguards and build detection/response automation.

Skills

Threat modeling & secure design

Identity and access management

Scripting & automation (Python)

Secure SDLC tooling

AI/LLM security

Cloud security (AWS)

Security architecture

Vulnerability management

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security/CodeQL

Secret scanning

SAST/DAST tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will harden identity, manage secrets, and embed security across engineering and AI workflows from the start.

The role emphasizes hands-on architecture, threat modeling, and pragmatic risk management within a small cross-functional team, with remote-first flexibility across approved US states.