Remote Senior Application Security Engineer

Oshi Health; Pennsylvania; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first work environment

Flexible PTO + holidays

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of a fully remote healthcare platform. You will set security standards, harden identity and secrets management, and embed security into engineering and AI workflows.

You will protect PHI and lead vulnerability management, threat modeling, and secure design reviews. The role emphasizes hands-on security across AWS, CI/CD tooling, and third-party integrations, with a focus on risk-based decision making and

Qualifications

• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, and risk.
• Able to operate as the sole security specialist on a small cross-functional team and explain tradeoffs.
• Working knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient in scripting and automation (Python and at least one shell).

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end to end: IAM, networking, logging, encryption.
• Enforce and tune security tooling (CodeQL, secret scanning, push protection).
• Review AI/vendor integrations for PHI, evaluating data flows and data loss prevention.
• Own vulnerability management and the penetration-testing relationship.

Skills

Security engineering

Application security

Cloud security (AWS)

Python scripting

HIPAA & NIST familiarity

Communication with engineers/executive

Sole security specialist on a small,跨‑

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of a fully remote healthcare platform. You will set security standards, harden identity and secrets management, and embed security into engineering and AI workflows.

You will protect PHI and lead vulnerability management, threat modeling, and secure design reviews. The role emphasizes hands-on security across AWS, CI/CD tooling, and third-party integrations, with a focus on risk-based decision making and