Senior Cloud & App Security Engineer (Remote)

Oshi Health; Louisiana; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Remote-first flexibility

Health benefits

401(k)

Job summary

Oshi Health seeks a Director of IT & Security to own the security of its fully remote, cloud-native healthcare platform. You will set security standards, harden identity/secrets, and integrate security into engineering workflows with a focus on healthcare data protection.

You will oversee application security, threat modeling, and secure code reviews, and drive vulnerability management across AWS. Strong scripting and HIPAA/NIST knowledge are required.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems (prompt injection, agent authorization, over-permissioning).
• Able to explain tradeoffs clearly to engineers and non-technical executives.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and shell).

Responsibilities

• Own security architecture for a cloud-native platform and shift to an agentic software lifecycle.
• Lead threat modeling, secure design reviews, and secure code reviews with focus on access-control and secrets exposure.
• Manage vulnerability management and coordinate penetration testing with development teams.
• Oversee AWS security end-to-end (IAM, networking, logging, encryption, workload protection).

Skills

Security engineering

Cloud security (AWS)

AI/LLM security

Tradeoff communication

Scripting (Python & shell)

HIPAA SOC 2 NIST knowledge

Education

Bachelor's degree in Computer Science or equivalent

Certifications: GWAPT, GCSA, GCLD, AWS Certified Security – Specialty, CISSP, Okta Certified Professional

Tools

GitHub Advanced Security / CodeQL

SAST/DAST tooling

Secret scanning & software supply-chain security tooling

Job description

Oshi Health seeks a Director of IT & Security to own the security of its fully remote, cloud-native healthcare platform. You will set security standards, harden identity/secrets, and integrate security into engineering workflows with a focus on healthcare data protection.

You will oversee application security, threat modeling, and secure code reviews, and drive vulnerability management across AWS. Strong scripting and HIPAA/NIST knowledge are required.