Remote Senior Security Engineer - Cloud & AI Security Lead

Oshi Health; Maryland; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% employee premiums

Remote-first with work-from-home

Flexible PTO + holidays

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of a fully remote, cloud-native healthcare SaaS platform. You will set security architecture standards, harden identity and secrets management, and integrate security into engineering and AI workflows from the start.

You will lead application and product security efforts, including threat modeling and secure code review, while ensuring HIPAA/SOC2/NIST alignment and risk-based prioritization for a small, cross-functional team.

Qualifications

• 6+ years in security engineering with depth in application/product and cloud security
• Experience in healthcare, fintech, or other regulated environments is a plus
• Familiarity with securing AI/LLM and agentic systems
• Able to act as sole security specialist on a small cross-functional team
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF
• Proficient in scripting and automation (Python and at least one shell)

Responsibilities

• Own security architecture across the platform and engineering workflows
• Lead threat modeling, secure design reviews, and code review processes
• Harden identity, secrets management, and access controls for the SaaS/AWS estate
• Oversee vulnerability management and penetration testing lifecycle
• Evaluate vendor integrations for PHI protection and data flows

Skills

Security engineering

Application security

Cloud security (AWS)

Threat modeling

SAST/DAST

CodeQL

Secret scanning

Software supply chain security

Scripting (Python)

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Terraform

AWS security certifications

Job description

Oshi Health is seeking a Director of IT & Security to own the security of a fully remote, cloud-native healthcare SaaS platform. You will set security architecture standards, harden identity and secrets management, and integrate security into engineering and AI workflows from the start.

You will lead application and product security efforts, including threat modeling and secure code review, while ensuring HIPAA/SOC2/NIST alignment and risk-based prioritization for a small, cross-functional team.