Senior App Security Engineer - Remote Cloud & AI Security

Oshi Health; Williamstown (NJ); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

11 holidays + 1 floating holiday

401(k)

Remote-first

Job summary

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from day one.

You will focus on application/product security, including threat modeling and secure code review, while ensuring robust risk controls, vendor integration reviews, and ongoing vulnerability management.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience in healthcare, fintech, or another regulated, data-sensitive environment is a strong plus.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, risk mitigation.
• Comfortable being the sole security specialist on a small, cross-functional team, prioritizing risk and communicating tradeoffs clearly.
• Working knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle and risk controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end to end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, CODEOWNERS).
• Review AI and third-party vendor integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and the penetration-testing relationship; drive findings to closure.

Job description

Oshi Health is seeking its first dedicated Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set architecture standards, harden identity and secrets management, and embed security into engineering and AI workflows from day one.

You will focus on application/product security, including threat modeling and secure code review, while ensuring robust risk controls, vendor integration reviews, and ongoing vulnerability management.