Remote Senior App & Cloud Security Engineer

Oshi Health; Alton (IL); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Health benefits

Equity

Flexible PTO

Job summary

Oshi Health seeks a Director of IT & Security to own security for a remote-first, healthcare SaaS platform. You will set architecture standards, harden identity/secrets, and embed security into engineering and AI workflows.

This builder-focused role requires hands-on leadership across threat modeling, secure design, and code reviews. You will shape the security architecture for an agentic SDLC, manage non-human identities, and secure AWS with strong IAM, logging, and encryption practices.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS). Experience in healthcare, fintech, or other regulated environments is a strong plus.
• SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model/supply-chain risk.
• Comfortable being the sole security specialist on a small cross-functional team, able to explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Responsibilities

• Own application and product security, including threat modeling, design reviews, and secure code review.
• Design and own security architecture for a move to agentic SDLC with phase-gate criteria and controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end to end: IAM, network segmentation, logging, encryption, and workload protection.
• Enforce security tooling: GitHub Advanced Security, secret scanning, push protection, CODEOWNERS enforcement.
• Review AI and third-party vendor integrations touching PHI, evaluating data flows and data loss-prevention needs.
• Own vulnerability management and the penetration-testing relationship, driving findings to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST

Secret scanning

AI/LLM security

Scripting (Python)

Communication to engineers/execs

NIST/SOC2 awareness

Education

Bachelor's in Computer Science

Tools

GitHub Advanced Security

CodeQL

Terraform

Job description

Oshi Health seeks a Director of IT & Security to own security for a remote-first, healthcare SaaS platform. You will set architecture standards, harden identity/secrets, and embed security into engineering and AI workflows.

This builder-focused role requires hands-on leadership across threat modeling, secure design, and code reviews. You will shape the security architecture for an agentic SDLC, manage non-human identities, and secure AWS with strong IAM, logging, and encryption practices.