Senior Security Engineer - Remote Healthcare SaaS

Oshi Health; Providence (RI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Health benefits

Flexible PTO

Equity

401(k)

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its remote, cloud-native healthcare platform. You will shape security architecture, harden identity and secrets, and embed security across engineering and AI workflows from day one.

You will lead threat modeling, secure coding reviews, and non-human identity management across SaaS and AWS, while enabling a fast-moving, compliant security function in a remote-first environment.

Qualifications

• Required Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and AWS.
• Hands-on with secure SDLC tooling: SAST/DAST, CodeQL, secret scanning, and software supply-chain security.

Responsibilities

• Own application and product security, including threat modeling and secure design reviews.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (CodeQL, secret scanning, CODEOWNERS enforcement).
• Review AI and third-party integrations touching PHI; evaluate data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships; drive findings to closure.
• Support HIPAA Security Rule safeguards and build automated detection/response capabilities.

Skills

Security engineering

Application security

Cloud security (AWS)

Identity & access management

Python scripting

Shell scripting

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

SAST/DAST

Secret scanning

Terraform

AWS IAM

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its remote, cloud-native healthcare platform. You will shape security architecture, harden identity and secrets, and embed security across engineering and AI workflows from day one.

You will lead threat modeling, secure coding reviews, and non-human identity management across SaaS and AWS, while enabling a fast-moving, compliant security function in a remote-first environment.