Senior Cloud App Security Engineer

Oshi Health; South Carolina; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first

Equity

Bonus potential

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of its remote, cloud-native healthcare platform. You will architect security, manage identity and secrets, and embed security into engineering and AI workflows from day one.

Lead application security and cloud security in AWS, drive threat modeling, and govern risk while enabling product innovation across the SaaS platform.

Qualifications

• 6+ years in security engineering with depth in application/product and cloud security.
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems; able to explain tradeoffs to engineers and executives.
• Knowledge of HIPAA/SOC 2/NIST; comfortable as the sole security expert on a small team.
• Proficient in Python and at least one shell; strong scripting and automation skills.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle and risk controls.
• Build and run non-human identity and secrets management across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption, workload protection.
• Enforce security tooling (CodeQL, secret scanning, push protection) and robust review processes.
• Oversee vulnerability management and manage penetration testing relationships.
• Evaluate AI/vendor integrations for PHI, data flows, retention, and data loss prevention.

Skills

Security engineering

Application security

Cloud security (AWS)

Threat modeling

Identity management

Secrets management

Python scripting

Shell scripting

Vulnerability management

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

SAST/DAST tools

Terraform

Job description

Oshi Health is seeking a Director of IT & Security to own the security of its remote, cloud-native healthcare platform. You will architect security, manage identity and secrets, and embed security into engineering and AI workflows from day one.

Lead application security and cloud security in AWS, drive threat modeling, and govern risk while enabling product innovation across the SaaS platform.