Senior Application Security Engineer — Remote, Cloud & AI

Oshi Health; Orangeburg (SC); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% premiums)

Flexible PTO + holidays

401(k) retirement plan

Remote-first with US-state eligibility

Job summary

Oshi Health is seeking a Director of IT & Security to own the security architecture of our fully remote, cloud-native healthcare platform. You will lead application and cloud security, threat modeling, and secure code reviews, ensuring robust identity and secrets management across AWS and SaaS environments.

You will guide an agentic DevSecOps approach, build scalable security controls, and partner with engineers and executives to balance risk and innovation in healthcare data protection.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model/supply-chain risk.
• Able to explain tradeoffs clearly to engineers and non-technical executives.
• Knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Responsibilities

• Own the security architecture for Oshi Health’s platform and AWS estate.
• Lead threat modeling, secure design reviews, and secure code reviews focusing on access-control and secrets exposure.
• Design phase-gate criteria and controls for an agentic software development lifecycle.
• Build and operate non-human identity and secrets management at scale.
• Secure the AWS environment across IAM, network segmentation, logging, encryption, and protections for S3, EKS, and Terraform.
• Tune security tooling (CodeQL, secret scanning, push protection) to prevent real risk.
• Review AI and third-party vendor integrations for PHI data flows and DLP needs.
• Manage vulnerability program and drive findings to closure.

Skills

Application security

Cloud security (AWS)

Threat modeling

Secret management

Security tooling

Python

Shell scripting

Education

Bachelor's degree in Computer Science

GWAPT

GCSA

GCLD

AWS Certified Security – Specialty

CISSP

Okta Certified Professional

Job description

Oshi Health is seeking a Director of IT & Security to own the security architecture of our fully remote, cloud-native healthcare platform. You will lead application and cloud security, threat modeling, and secure code reviews, ensuring robust identity and secrets management across AWS and SaaS environments.

You will guide an agentic DevSecOps approach, build scalable security controls, and partner with engineers and executives to balance risk and innovation in healthcare data protection.