Senior App Security Engineer – Remote, Cloud & AI-Ready

Oshi Health; Baton Rouge (LA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Salary range: $170k–$190k + bonus & EQ

Health benefits

Flexible PTO + holidays

401(k) retirement plan

Remote-first: work from anywhere in US

Job summary

Oshi Health seeks a Director of IT & Security to own and evolve the security architecture of its fully remote healthcare platform. You will secure application and product security, manage non-human identities, and shape security workflows across engineering and AI projects.

The role requires 6+ years in security engineering, cloud security (AWS), and a deep focus on healthcare data protection, with hands-on expertise in SAST/DAST, GitHub Advanced Security, and supply-chain security.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience in healthcare or other regulated, data-sensitive environments is a plus.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model risk.
• Proficient with scripting and automation (Python and at least one shell).
• Knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.

Responsibilities

• Own the security architecture for the SaaS platform, including identity and secrets management.
• Lead threat modeling, secure design reviews, and secure code reviews.
• Secure our AWS environment end-to-end (IAM, network, logging, encryption, workload protection).
• Enforce security tooling (CodeQL, secret scanning, branch protection) across pipelines.
• Own vulnerability management and coordinate pen-testing with engineering.

Skills

Security engineering

Application security

Cloud security (AWS)

Threat modeling

AI/LLM security

Scripting (Python & shell)

Education

Bachelor's degree in Computer Science or equivalent

Security certifications (GWAPT, GCSA, GCLD, CISSP, AWS Security)

Tools

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Software supply-chain security

Job description

Oshi Health seeks a Director of IT & Security to own and evolve the security architecture of its fully remote healthcare platform. You will secure application and product security, manage non-human identities, and shape security workflows across engineering and AI projects.

The role requires 6+ years in security engineering, cloud security (AWS), and a deep focus on healthcare data protection, with hands-on expertise in SAST/DAST, GitHub Advanced Security, and supply-chain security.