Remote Senior App & Cloud Security Engineer

Oshi Health; Clayton (MO); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 holidays + 1 floating holiday

401(k)

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity/secrets management, and embed security into engineering and AI workflows from day one.

You will lead threat modeling, secure design/code reviews, and focus on access-control/security in our member-facing APIs.

Qualifications

• Bachelor's degree or equivalent practical experience in computer science or related field.
• ~6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience in healthcare, fintech, or regulated data environments is a strong plus.
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, access control, and risk management.
• Able to act as the sole security specialist on a small cross-functional team and communicate tradeoffs clearly.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and at least one shell).
• Certifications: GWAPT, GCSA, GCLD, AWS Certified Security – Specialty, CISSP, Okta Certified Professional.

Responsibilities

• Own application and product security: threat modeling, secure design reviews, and secure code reviews.
• Design and own security architecture for agentic SDLC, including phase-gate criteria and risk controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end to end: IAM, networking, logging, encryption, workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, CODEOWNERS).
• Review AI and third-party vendor integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships; drive findings to closure.

Skills

Application security

Cloud security (AWS)

Security architecture

Identity & secrets management

Vulnerability management

Penetration testing

Threat modeling

SAST/DAST / CodeQL

AI/LLM security

Scripting automation (Python)

HIPAA/SOC2/NIST familiarity

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning tools

Okta Certified Professional

Terraform

AWS IAM / EKS / S3

GWAPT

GCSA

GCLD

AWS Certified Security – Specialty

CISSP

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity/secrets management, and embed security into engineering and AI workflows from day one.

You will lead threat modeling, secure design/code reviews, and focus on access-control/security in our member-facing APIs.