Remote Senior App Security Engineer

Oshi Health; Austin (TX); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first

Flexible time off

Job summary

Oshi Health is seeking a Senior Security Engineer to own security across a cloud-native platform. You will lead architecture, identity management, and security tooling in a fully remote, SaaS healthcare environment.

This hands-on, builder-focused role requires shaping secure development and AI workflow integration from the ground up. You will protect PHI data, drive vulnerability management, and collaborate with engineers and executives to balance risk and agility.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Experience in healthcare/regulated data environments is a plus.
• Hands-on with secure SDLC tooling (SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning).
• Strong IAM including Okta, OAuth/OIDC, SAML, MFA; managing non-human identities and secrets.
• Experience securing AI/LLM/agentic systems and data-flow risk.
• Able to operate as sole security expert in a small cross-functional team.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in Python and at least one shell.

Responsibilities

• Own application and product security and secure code reviews.
• Design security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure the AWS environment including IAM, networking, logging, encryption.
• Enforce and tune security tooling (CodeQL, secret scanning, review workflows).
• Evaluate AI and third‑party integrations touching PHI for data protection.
• Own vulnerability management and remediation collaboration with dev teams.
• Support HIPAA security safeguards and detection/response automation.

Skills

Application security

Cloud security (AWS)

SAST/DAST tooling

Identity and access mgmt

AI/LLM security

Security architecture

Communication to engineers/executives

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Terraform

Job description

Oshi Health is seeking a Senior Security Engineer to own security across a cloud-native platform. You will lead architecture, identity management, and security tooling in a fully remote, SaaS healthcare environment.

This hands-on, builder-focused role requires shaping secure development and AI workflow integration from the ground up. You will protect PHI data, drive vulnerability management, and collaborate with engineers and executives to balance risk and agility.