Senior App Security Engineer — Remote & Equity

Oshi Health; Idaho; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first

401(k)

Flexible PTO

Job summary

Oshi Health seeks its first dedicated Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and build security into our engineering and AI workflows from the start.

You will lead application and product security, design agentic SDLC controls, manage non-human identities, secure AWS (IAM, networking, logging, encryption), and oversee vulnerability management and

Qualifications

• 6+ years in security engineering, with depth in application/product and cloud security (AWS).
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, risk management.
• Experience in healthcare/regulated data environments is a plus.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle with phase-gate criteria.
• Build and run non-human identity and secrets management at scale (service accounts, tokens, OAuth).
• Secure AWS environment end to end (IAM, networking, logging, encryption, workloads).
• Enforce security tooling (GitHub Advanced Security, CODEOWNERS, branch protection).
• Oversee vulnerability management and pen-testing, driving findings to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

AI/LLM security

Scripting (Python)

Security architecture

Vulnerability management

Threat modeling

Identity & secrets management

Clear communication with engineers/exs

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

GitHub Advanced Security/CodeQL

Job description

Oshi Health seeks its first dedicated Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will set security architecture standards, harden identity and secrets management, and build security into our engineering and AI workflows from the start.

You will lead application and product security, design agentic SDLC controls, manage non-human identities, secure AWS (IAM, networking, logging, encryption), and oversee vulnerability management and