Senior App & Cloud Security Engineer — Remote

Oshi Health; Maryland City (MD); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first policy

Flexible PTO

Paid holidays (11 + floating)

Job summary

Oshi Health seeks a Director of IT & Security to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity/secrets management, and integrate security into engineering and AI workflows from the start.

You will oversee application/product security, threat modeling, secure design reviews, and code reviews, with focus on access-control and secrets-flows for a member-facing API-rich product.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• ~6+ years in security engineering with application/product and cloud security.
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning.
• Familiarity with securing AI/LLM and agentic systems.
• Able to work as the sole security specialist on a small team and explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficiency in scripting automation (Python and shell).

Responsibilities

• Own security architecture and harden identity/secrets management across cloud and SaaS.
• Lead threat modeling, secure design reviews, and secure code reviews.
• Secure AI/LLM integration and agentic development lifecycle controls.
• Build non-human identity and secrets management at scale (OAuth, service accounts).
• Secure AWS environment: IAM, networking, logging, encryption, workloads.
• Enforce security tooling (CodeQL, secret scanning, branch protections).
• Oversee vulnerability management and penetration-testing relationships.
• Review third-party vendor integrations touching PHI and data flows.

Skills

Security engineering

Application security

Cloud security (AWS)

Threat modeling

Python scripting

Shell scripting

AI/LLM security

Cross-functional collaboration

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

AWS

HIPAA/SOC2/NIST knowledge

Job description

Oshi Health seeks a Director of IT & Security to own the security of its fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity/secrets management, and integrate security into engineering and AI workflows from the start.

You will oversee application/product security, threat modeling, secure design reviews, and code reviews, with focus on access-control and secrets-flows for a member-facing API-rich product.