Senior Cloud & App Security Engineer — Remote

Oshi Health; Charlotte (NC); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

Remote-first

Equity opportunity

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You’ll set security standards, harden identity/secrets management, and embed security into engineering and AI workflows from day one.

In this hands-on role, you’ll lead threat modeling, secure design reviews, and vulnerability management across our SaaS and AWS environment, partnering with engineering and leadership to balance risk and innovation.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with a focus on application/product and cloud security (AWS).
• Experience in healthcare or regulated environments is a strong plus.
• Hands-on with SAST/DAST, secret scanning, and software supply-chain security.
• Strong identity management including OAuth/OIDC, SAML, MFA, and non-human identities.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design security architecture for SaaS and AI-enabled workflows with phase-gate criteria.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption, protection.
• Enforce security tooling: CodeQL, secret scanning, push protection, CODEOWNERS reviews.
• Evaluate AI/3rd-party integrations for PHI data flows and data loss prevention needs.
• Own vulnerability management and penetration testing relationships; drive closures.
• Support HIPAA Security Rule safeguards and build detection/response automation.

Skills

Application security

Cloud security (AWS)

Identity & access management

Threat modeling

Scripting (Python)

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Terraform

Okta / IAM tooling

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our remote, cloud-native healthcare platform. You’ll set security standards, harden identity/secrets management, and embed security into engineering and AI workflows from day one.

In this hands-on role, you’ll lead threat modeling, secure design reviews, and vulnerability management across our SaaS and AWS environment, partnering with engineering and leadership to balance risk and innovation.