About the role
We are looking for a Senior Security Engineer with 5+ years of experience to be the first dedicated security hire at a high-growth digital health company. You'll own the technical security of a fully remote, cloud-native healthcare platform – acting as a hands-on builder, not a policy desk. You will set security architecture standards for our product and AWS environments, harden identity and secrets management, and design the guardrails for our transition to an agentic SDLC where AI agents help plan, build, and deploy code against regulated data. This is a uniquely forward-looking role where your fingerprints will be on the foundation.
What you will be doing
- Owning application and product security – threat modeling, secure design review, and secure code review focused on authorization and access-control flaw classes for a member-facing healthcare app and its APIs
- Designing and owning the security architecture for an agentic SDLC – building phase-gate criteria, deterministic out-of-band controls for agent-written code, and lifecycle management for non-human identities
- Securing the AWS environment – IAM, network segmentation, logging, configuration baselines, encryption, and workload protection across S3, EKS, and Terraform
- Building and running non-human identity and secrets management at scale – service accounts, scoped tokens, OAuth grants, and machine credentials with provisioning, rotation, and least privilege
- Enforcing and tuning GitHub Advanced Security (CodeQL, secret scanning, push protection) as required status checks and building automation so a small security function operates with outsized leverage
About Oshi Health
Oshi Health is revolutionizing GI care with a digital clinic model that provides easy, convenient access to an integrated and multidisciplinary care team that takes a holistic approach to diagnosing, managing and treating digestive health conditions. Oshi Health has been recognized by Modern Healthcare and Builtin as the recipient of Best Place to Work awards. This recognition highlights our dedication to creating a workplace environment that prioritizes our team, fosters inclusivity, and is committed to our mission.
We take time to get to know each patient, develop a personalized, whole-person care plan that includes identification of symptom triggers and prescription of evidence-based interventions, including medications, dietary changes, and mental health support. Our care is delivered virtually through our app, via secure messaging and telehealth visits. When in-person diagnostics or procedures are needed, we take a concierge approach and coordinate access, care and follow up with local providers.
Required skills
Refer someone
Know someone great for this role?
Share your link. If they get hired through Standout, you get $3,000.
Job details
Salary
$170,000 - $200,000
Location
Remote
Experience
5+ years
Funding
Total raised
$119M
Last stage
Series C
Investors
Founders
What happens next.
No applications, no recruiter spam. Just the intro.
Confirm the fit
A few questions to make sure this role is the right shape for you. Two minutes.
I pitch you to the company
I write the intro, send it to the founder, and handle the back-and-forth.
A meeting lands on your calendar
If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.