Senior Cloud & App Security Engineer - Remote

Oshi Health; New York (NY); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k) plan

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will build secure architecture, manage identities and secrets, and integrate security into our AI-enabled development processes.

This remote-first role requires 6+ years in security engineering, strong IAM and SAST/DAST experience, and a deep understanding of HIPAA, SOC 2, and NIST frameworks. Collaboration with a small team and executives is essential.

Qualifications

• Hands-on with secure SDLC tooling (SAST/DAST, CodeQL)
• Experience with identity and access management (Okta, OAuth/OIDC, SAML)
• Strong scripting in Python and shell
• Familiarity with HIPAA/SOC 2/NIST frameworks

Responsibilities

• Own application and product security for a member-facing healthcare app
• Design security architecture for a cloud-native SaaS platform
• Manage non-human identities and secrets across AWS
• Oversee vulnerability management and penetration-testing relationships
• Support HIPAA Security Rule technical safeguards and incident response

Skills

SAST/DAST

GitHub Security

Identity IAM

Python scripting

Education

Bachelor's degree

Tools

CodeQL

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our cloud-native healthcare platform. You will build secure architecture, manage identities and secrets, and integrate security into our AI-enabled development processes.

This remote-first role requires 6+ years in security engineering, strong IAM and SAST/DAST experience, and a deep understanding of HIPAA, SOC 2, and NIST frameworks. Collaboration with a small team and executives is essential.