Senior App Security Engineer - Remote, Cloud & AI

Oshi Health; Eagle (ID); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% employee premiums

401(k) plan

Flexible PTO + holidays

Remote-first work

Equity

Job summary

Oshi Health, a fully remote, SaaS healthcare platform, is seeking its first dedicated Director of IT & Security. You will own security architecture, build identity and secrets management, and weave security into engineering and AI workflows from day one.

You'll lead application security, threat modeling, secure code reviews, and manage vulnerability programs and vendor integrations, while ensuring HIPAA, SOC 2, and NIST-aligned practices across AWS, S3, EKS, and Terraform.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• ~6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience in healthcare, fintech, or regulated data environments is a plus.
• Familiarity with securing AI/LLM and agentic systems.
• Proficient in scripting (Python) and automation.

Responsibilities

• Own security architecture standards and scale security across SaaS and AWS.
• Lead threat modeling, secure design reviews, and secure code reviews for patient-facing APIs.
• Build and run non-human identity and secrets management at scale (service accounts, tokens, OAuth, machine credentials).
• Secure our AWS environment end to end, including IAM, networking, logging, encryption, and workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, branch protection).
• Oversee vulnerability management, penetration testing, and vendor security reviews.

Skills

Security engineering

Application security

Cloud security

SAST/DAST

Code review

Identity & secrets management

AI/LLM security

Python scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Terraform

AWS

Job description

Oshi Health, a fully remote, SaaS healthcare platform, is seeking its first dedicated Director of IT & Security. You will own security architecture, build identity and secrets management, and weave security into engineering and AI workflows from day one.

You'll lead application security, threat modeling, secure code reviews, and manage vulnerability programs and vendor integrations, while ensuring HIPAA, SOC 2, and NIST-aligned practices across AWS, S3, EKS, and Terraform.