Remote Senior Security Engineer – Cloud & AI Security

Oshi Health; Tennessee; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k) plan

Remote-first work

Job summary

Oshi Health seeks a Director of IT & Security to own the security of the cloud-native SaaS healthcare platform. This hands-on role focuses on security architecture, identity and secrets management, and embedding security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure code reviews, while hardening access controls and vendor integrations. This senior position requires deep experience and independent decision‑making in a

Qualifications

• 6+ years in security engineering, with focus on application/product and cloud security
• Experience with SAST/DAST, secret scanning, and software supply‑chain security
• Familiarity with securing AI/LLM and agentic systems
• Able to work as the sole security expert on a small cross‑functional team

Responsibilities

• Own application and product security, including threat modeling and design reviews
• Secure code reviews and architecture for AWS and cloud environments
• Define and enforce security controls across engineering and AI workflows
• Manage vulnerability management, pen-testing relationships, and remediation feedback loops
• Evaluate third‑party integrations for PHI handling and risk

Skills

Security engineering

Application security

AWS security

Scripting (Python)

AI/LLM security

Executive communication

Education

Bachelor's in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Supply-chain security

Okta

Job description

Oshi Health seeks a Director of IT & Security to own the security of the cloud-native SaaS healthcare platform. This hands-on role focuses on security architecture, identity and secrets management, and embedding security into engineering and AI workflows from the start.

You will lead threat modeling, secure design reviews, and secure code reviews, while hardening access controls and vendor integrations. This senior position requires deep experience and independent decision‑making in a