Senior Security Engineer

The role

You will own the technical security of a remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and build security into engineering and AI workflows.

What you will do

• Own application and product security including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment including IAM, network segmentation, logging, encryption, and workload protection.
• Enforce and tune security tooling like GitHub Advanced Security.
• Review AI and third-party vendor integrations.
• Own vulnerability management and the penetration-testing relationship.
• Support HIPAA Security Rule technical safeguards and stand up detection and response capabilities.

Required qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security.
• Strong in identity and access management, including Okta, OAuth/OIDC, SAML, phishing-resistant MFA, and management of non-human identities and secrets.
• Familiarity with, or a genuine drive to go deep on, securing AI/LLM and agentic systems.
• Comfortable being the sole security specialist on a small, cross-functional team.
• Working knowledge of the HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Nice to have

• Experience in healthcare, fintech, or another regulated, data-sensitive environment is a strong plus.
• One or more certifications: OSCP, GIAC (e.g., GWAPT, GCSA, GCLD), AWS Certified Security – Specialty, CISSP, or Okta Certified Professional.
• Experience operating a compliance-automation platform.

Benefits

• 90% employee premiums paid for medical, dental, and vision coverage
• Flexible PTO
• 11 Holidays
• 1 floating holiday
• Eligibility to contribute to 401(k)

About the company

Oshi Health is a healthcare platform protecting sensitive health data for people with chronic GI conditions.