Senior App Security Engineer – AI, Cloud, Remote

Oshi Health; Idaho Falls (ID); Remote; USD 170.000 - 190.000; Vollzeit

Benefits dieser Stelle

Salary $170,000–$190,000 + bonus and +

Health benefits

Flexible PTO

401(k)

Zusammenfassung

Oshi Health is seeking a Director of IT & Security to own the security of our remote, SaaS platform. You will set security architecture standards, harden identity/secrets management, and integrate security into engineering and AI workflows from the ground up.

You will lead vulnerability management, conduct risk assessments, and ensure HIPAA/SOC 2 compliance while communicating tradeoffs to both engineers and executives.

Qualifikationen

• 6+ years in security engineering with depth in application/product and cloud security.
• Experience in healthcare, fintech, or another regulated environment is a strong plus.
• Familiarity with HIPAA, SOC 2, and NIST CSF; able to discuss tradeoffs with engineers and executives.
• Proficient scripting and automation (Python and shell).
• Comfortable being the sole security specialist on a small team.

Aufgaben

• Own security of the healthcare SaaS platform from design to run, including threat modeling and secure code review.
• Design and enforce architecture standards, identity/secrets management, and AI/ML workflow security.
• Lead vulnerability management, pen-testing relationships, and vendor security assessments.
• Hardening of AWS environment: IAM, encryption, logging, and network segmentation.
• Ensure compliance with HIPAA SOC 2 and related regulations; communicate risks to engineers and execs.

Kenntnisse

Security engineering

Cloud security (AWS)

Threat modeling

Code review

SAST/DAST

GitHub Advanced Security/CodeQL

Python scripting

HIPAA Security Rule

NIST Cybersecurity Framework

Ausbildung

Bachelor's degree in Computer Science or equivalent

Tools

Terraform

AWS

Jobbeschreibung

Oshi Health is seeking a Director of IT & Security to own the security of our remote, SaaS platform. You will set security architecture standards, harden identity/secrets management, and integrate security into engineering and AI workflows from the ground up.

You will lead vulnerability management, conduct risk assessments, and ensure HIPAA/SOC 2 compliance while communicating tradeoffs to both engineers and executives.