Senior Application Security Engineer - Remote & Cloud

Oshi Health; Springfield (IL); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of its fully remote, cloud-native healthcare platform. You will define security architecture, harden identity and secrets management, and weave security into engineering and AI workflows from day one.

You’ll drive threat modeling, secure design reviews, and secure code reviews across the SaaS stack, partnering with engineering and product teams.

Qualifications

• 6+ years of security engineering experience.
• Experience securing AI/LLM and agentic systems.
• Familiarity with HIPAA, SOC 2, and NIST CSF.
• Proficiency in scripting (Python).

Responsibilities

• Own the security architecture for Oshi Health's cloud-native platform.
• Lead threat modeling, secure design reviews, and secure code reviews.
• Build and enforce identity and secrets management at scale.
• Secure AWS environments including IAM, networking, logging, and encryption.
• Evaluate vendor integrations for PHI data flows and risk.

Skills

Security engineering

AI/LLM security

Cloud security

Python scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

AWS

Dependency security

Job description

Oshi Health is seeking a Director of IT & Security to own the security of its fully remote, cloud-native healthcare platform. You will define security architecture, harden identity and secrets management, and weave security into engineering and AI workflows from day one.

You’ll drive threat modeling, secure design reviews, and secure code reviews across the SaaS stack, partnering with engineering and product teams.