Senior Cloud & App Security Engineer – Remote

Oshi Health; Elm (PA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k) retirement plan

Job summary

Oshi Health is seeking its Director of IT & Security to own the security of our remote SaaS and cloud-native healthcare platform. You will set security standards, secure design, and integrate security into engineering workflows from the start.

You will lead threat modeling, secret management, and IA/security tooling while safeguarding PHI, reviewing vendor integrations, and directing vulnerability management across AWS and our services.

Qualifications

• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience in healthcare, fintech, or regulated data environments is a strong plus.
• Familiarity with securing AI/LLM and agentic systems (prompt injection, agent authorization, over-permissioning).
• Ability to work as sole security specialist on a small cross-functional team and communicate tradeoffs clearly to engineers and executives.

Responsibilities

• Own application and product security, including threat modeling and secure design/code reviews.
• Design and own security architecture for agentic SDLC with phase-gate criteria and out-of-band controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption, workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, Code scanning, push protection, CODEOWNERS).
• Review AI and third-party vendor integrations touching PHI for data flows and data-loss prevention.
• Own vulnerability management and penetration testing relationships; drive findings to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST

GitHub Advanced Security/CodeQL

Python scripting

AI/LLM security

Executive communication

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning tooling

Job description

Oshi Health is seeking its Director of IT & Security to own the security of our remote SaaS and cloud-native healthcare platform. You will set security standards, secure design, and integrate security into engineering workflows from the start.

You will lead threat modeling, secret management, and IA/security tooling while safeguarding PHI, reviewing vendor integrations, and directing vulnerability management across AWS and our services.