Senior App Security Engineer - Remote & Cloud AI

Oshi Health; New Jersey; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Flexible remote work

Equity

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and code security across AWS, S3, EKS, and Terraform, while shaping security in an agentic software lifecycle.

This senior role demands hands-on expertise and clear risk tradeoffs to engineers and executives. You will build non-human identity and secrets management, enforce robust security tooling, and manage

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience in healthcare, fintech, or other regulated data-sensitive environments is a strong plus.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model risk.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run identity and secrets management at scale across SaaS and AWS.

Skills

Security engineering

Application security

AWS security

SAST/DAST

GitHub Advanced Security

Secret scanning

AI/LLM security

HIPAA/SOC2/NIST

Python scripting

Shell scripting

Education

Bachelor's degree in Computer Science

Tools

AWS

Terraform

Job description

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and code security across AWS, S3, EKS, and Terraform, while shaping security in an agentic software lifecycle.

This senior role demands hands-on expertise and clear risk tradeoffs to engineers and executives. You will build non-human identity and secrets management, enforce robust security tooling, and manage