Senior Security Engineer (Remote) — Healthcare SaaS & AI

Oshi Health; California; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-first flexibility

Health benefits

401(k)

Flexible PTO

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of its cloud-native healthcare platform. This hands-on role focuses on architecture, identity and secrets management, and secure integration with AI workflows.

You will help harden the platform from the ground up and shape secure engineering practices across teams. You’ll lead threat modeling, secure design reviews, and end-to-end security for AWS services while maintaining HIPAA and NIST-aligned controls.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Hands-on with secure SDLC tooling including SAST/DAST and GitHub Advanced Security.
• Strong in IAM including Okta, OAuth/OIDC, SAML; MFA and non-human identities management.
• Familiarity with securing AI/LLM and agentic systems and risk assessment.
• Able to explain tradeoffs clearly to engineers and executives.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for AI/SDLC transformation and phase-gate controls.
• Build non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption, workload protection.
• Enforce security tooling: CodeQL, secret scanning, branch protection, CODEOWNERS.
• Review third-party integrations touching PHI; assess data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships; drive closure.
• Support HIPAA Security Rule technical safeguards and build detection/response automation.

Skills

Application security

Cloud security (AWS)

Secure SDLC tooling

Identity and access management

AI/LLM security

Security architecture

Scripting (Python)

Communication with execs

Governance (HIPAA/SOC 2/NIST)

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security / CodeQL

Secret scanning tools

SAST/DAST tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of its cloud-native healthcare platform. This hands-on role focuses on architecture, identity and secrets management, and secure integration with AI workflows.

You will help harden the platform from the ground up and shape secure engineering practices across teams. You’ll lead threat modeling, secure design reviews, and end-to-end security for AWS services while maintaining HIPAA and NIST-aligned controls.