Remote Senior AppSec Engineer — Cloud & AI Security

Oshi Health; Lansing (MI); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Salary range: $170,000–$190,000

Health benefits

Flexible PTO and holidays

401(k)

Remote-first

Job summary

Oshi Health seeks its first dedicated Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

This hands-on role focuses on application and product security, threat modeling, secure code reviews, and safeguarding PHI.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience in healthcare, fintech, or regulated data environments is a strong plus.
• Familiarity with securing AI/LLM and agentic systems (prompt injection, governance).
• Experience as sole security specialist on a small, cross-functional team.
• Proficiency in Python and shell scripting.

Responsibilities

• Own security architecture for the platform, including threat modeling and secure design reviews.
• Own secure code reviews and vulnerability management across the stack.
• Secure our AWS environment end-to-end: IAM, networking, logging, encryption, workloads.
• Enforce and tune security tooling (CodeQL, secret scanning, review gates).
• Review AI/vendor integrations touching PHI and data-flow risk.
• Lead penetration testing relationships and feed issues back to development.

Skills

Security architecture

Cloud security AWS

Application security

Threat modeling

Secure code review

SAST/DAST

Python scripting

NIST/SOC 2/HIPAA

AI/LLM security

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Terraform

AWS IAM & Security tooling

Job description

Oshi Health seeks its first dedicated Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from the start.

This hands-on role focuses on application and product security, threat modeling, secure code reviews, and safeguarding PHI.