Remote Senior Security Engineer – Cloud & AI

Oshi Health; Colorado; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% premiums)

Flexible PTO + holidays

401(k)

Remote-first (US states)

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and bake security into engineering and AI workflows from day one.

You will lead application security, threat modeling, secure design reviews, and secure code reviews, while building non-human identity & secrets management across our AWS estate and SaaS.

Qualifications

• 6+ years in security engineering with depth in app/product and cloud security (AWS).
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model risk.
• Able to be the sole security specialist on a small team and explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic SDLC, with phase‑gate criteria and tested clawback procedures.
• Build and run non-human identity and secrets management across SaaS and AWS estate.
• Secure AWS environment end to end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (GitHub Advanced Security/CodeQL, secret scanning, push protection, CODEOWNERS reviews).
• Review AI and third‑party integrations touching PHI for data flows and retention.
• Own vulnerability management and the penetration‑testing relationship, driving findings to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

HIPAA SOC 2 NIST knowledge

Scripting / automation (Python)

Communicating with executives

AI/LLM security

Education

GWAPT, GCSA, GCLD certs; AWS Certified Security – Specialty; CISSP; Okta Certified Professional

Tools

GitHub Advanced Security/CodeQL

SAST/DAST

Secret scanning

Software supply-chain security

Job description

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and bake security into engineering and AI workflows from day one.

You will lead application security, threat modeling, secure design reviews, and secure code reviews, while building non-human identity & secrets management across our AWS estate and SaaS.