Senior AppSec Engineer – Cloud, AI & HealthTech (Remote)

Oshi Health; Idaho Falls (ID); Remote; USD 170.000 - 190.000; Vollzeit

Benefits dieser Stelle

Bonus and equity

Health benefits

Flexible PTO

401(k)

Zusammenfassung

Oshi Health is hiring a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will build security into engineering and AI workflows, set architecture standards, and harden identity and secrets management across SaaS and AWS.

You will lead threat modeling, secure design reviews, and secure code reviews, focusing on access-control, secrets exposure, and risk mitigation for a member-facing app and its APIs.

Qualifikationen

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Experience with secure SDLC tooling, SAST/DAST, and software supply-chain security.
• Strong IAM knowledge (Okta, OAuth/OIDC, SAML, MFA) and managing non-human identities.

Aufgaben

• Own application and product security across the healthcare platform and APIs.
• Design and own security architecture for agentic SDLC and governance gates.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environments including IAM, logging, encryption, and networking.
• Enforce and tune security tooling, CODEOWNERS, and branch protections.
• Review AI-integrations for PHI, data flows, retention, and DLP needs.
• Own vulnerability management and penetration-testing relationships.
• Support HIPAA Security Rule safeguards and detection/response automation.

Kenntnisse

Application security

Cloud security AWS

Identity & access management

Secure SDLC tooling

GitHub Advanced Security

CodeQL

Scripting Python

AI/LLM security

Non-human identities

Risk communication

Ausbildung

Bachelor's degree in CS or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning tools

IAM tooling

Jobbeschreibung

Oshi Health is hiring a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will build security into engineering and AI workflows, set architecture standards, and harden identity and secrets management across SaaS and AWS.

You will lead threat modeling, secure design reviews, and secure code reviews, focusing on access-control, secrets exposure, and risk mitigation for a member-facing app and its APIs.