Senior App & Cloud Security Engineer (Remote)

Oshi Health; Texas; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% premiums)

Remote-first with flex working

Vacation and holidays

401(k) retirement plan

Job summary

Oshi Health is seeking a Director of IT & Security to own security architecture for a remote-first SaaS healthcare platform. You will lead security engineering across AWS, identity, secrets management, and AI workflow integration, driving risk reduction and secure coding practices.

Ideal candidates have 6+ years in security engineering, strong application and cloud security experience, and familiarity with HIPAA, SOC 2, and NIST frameworks.

Qualifications

• 6+ years of security engineering experience, with focus on application and cloud security.
• Experience in healthcare, fintech, or regulated data environments is a strong plus.
• Proficient with scripting (Python, shell) and automation.
• Familiar with HIPAA/SOC 2/NIST controls and secure SDLC.

Responsibilities

• Own application and product security, including threat modeling and secure review.
• Design and enforce security architecture across AWS, IAM, and data flows.
• Lead vulnerability management and coordinate with development teams.
• Secure AI/LLM and agentic systems, including risk and access controls.
• Oversee non-human identity management, secrets handling, and code security gates.

Skills

Security engineering

Application security

Cloud security

Threat modeling

CodeQL / OSS security

SAST/DAST

Credential management

AI/LLM security

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Terraform

AWS

Security tooling

Job description

Oshi Health is seeking a Director of IT & Security to own security architecture for a remote-first SaaS healthcare platform. You will lead security engineering across AWS, identity, secrets management, and AI workflow integration, driving risk reduction and secure coding practices.

Ideal candidates have 6+ years in security engineering, strong application and cloud security experience, and familiarity with HIPAA, SOC 2, and NIST frameworks.