Senior AppSec Engineer – Remote, HIPAA‑Aware, AI‑Ready

Oshi Health; Butlerville (IN); Remote; USD 170,000 - 190,000; Full time

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud‑native healthcare platform. You will shape security architecture, harden identity and secrets, and integrate security into engineering and AI workflows from the start.

In a hands‑on role, you will manage threat modeling, AWS security, IAM, SAST/DAST tooling, and vendor risk. You will partner with engineers and executives to balance risk and enable rapid product delivery.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS) and app security.
• Hands-on with SAST/DAST, CodeQL, secret scanning, and supply‑chain security.
• Strong IAM experience including Okta, OAuth/OIDC, SAML, MFA.
• Experience with securing AI/LLM and agentic systems is a plus.
• Able to communicate tradeoffs to engineers and executives.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end‑to‑end: IAM, segmentation, logging, encryption.
• Enforce tooling: GitHub Advanced Security, branch protection, CODEOWNERS.
• Review AI/vendor integrations touching PHI for data flows and risk.
• Own vulnerability management and penetration testing relationships.
• Support HIPAA security safeguards and detection/response automation.

Skills

Secure SDLC tooling

IAM

AI security

Cloud security (AWS)

Scripting (Python)

Communication

OAuth/OIDC

SAML

MFA

Non-human identities

Education

Bachelor's degree in CS or equivalent

Tools

GitHub Advanced Security

CodeQL

Okta

Secret scanning

AWS IAM

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud‑native healthcare platform. You will shape security architecture, harden identity and secrets, and integrate security into engineering and AI workflows from the start.

In a hands‑on role, you will manage threat modeling, AWS security, IAM, SAST/DAST tooling, and vendor risk. You will partner with engineers and executives to balance risk and enable rapid product delivery.