SaaS Security Architect for AI & Cloud

Oshi Health; New York (NY); À distance; USD 170 000 - 190 000; Plein temps

Avantages offerts par ce poste

Health benefits

Flexible PTO

401(k)

Remote-first

equity

Résumé du poste

Oshi Health seeks a Director of IT & Security to own the security of our cloud-native healthcare platform. This role requires building security into engineering and AI workflows, enforcing access control, and guiding risk-aware decisions across the organization.

You will lead vulnerability management, secure design reviews, and ensure HIPAA/SOC 2/NIST alignment while working in a remote-first, US-wide environment with equity participation and bonus potential.

Qualifications

• 6+ years in security engineering with focus on application and cloud security.
• Experience in healthcare, fintech, or regulated environments is a plus.
• SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, risk management.
• Knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient in scripting and automation (Python and shell).
• Experience operating a compliance-automation platform.

Responsabilités

• Own security architecture for SaaS and cloud environment across AWS.
• Lead threat modeling, secure design reviews, and secure code reviews.
• Harden identity and secrets management and automate security in CI/CD.
• Oversee vulnerability management and penetration testing relationships.
• Ensure governance aligns with HIPAA, SOC 2, and NIST CSF.

Connaissances

Security engineering

Application security

Cloud security (AWS)

Threat modeling

Vulnerability management

AI/LLM security

Scripting (Python, Bash)

Formation

Bachelor's degree in Computer Science or equivalent

Outils

GitHub Advanced Security/CodeQL

Secret scanning tools

Compliance automation platform

Description du poste

Oshi Health seeks a Director of IT & Security to own the security of our cloud-native healthcare platform. This role requires building security into engineering and AI workflows, enforcing access control, and guiding risk-aware decisions across the organization.

You will lead vulnerability management, secure design reviews, and ensure HIPAA/SOC 2/NIST alignment while working in a remote-first, US-wide environment with equity participation and bonus potential.