Senior Cloud & Application Security Engineer (Remote)

Oshi Health; Bastrop (LA); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health insurance premiums covered

Remote-first / work from home

401(k)

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will set architecture standards, manage identities and secrets, and integrate security into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and code reviews with a focus on access-control and secrets exposure, while driving the security posture across AWS services and third-party integrations.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with focus on application/product and cloud security (AWS).
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM/agentic systems and risk scenarios.
• Ability to operate as the sole security specialist on a small, cross-functional team.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficiency in Python and at least one shell scripting language.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for agentic SDLC and phase-gate criteria.
• Build and run non-human identity and secrets management across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, branch protection, CODEOWNERS).
• Review AI and vendor integrations before touching PHI; assess data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships; drive findings to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST

GitHub Advanced Security/CodeQL

AI/LLM security

Python scripting

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Terraform

AWS security tooling

Job description

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will set architecture standards, manage identities and secrets, and integrate security into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, and code reviews with a focus on access-control and secrets exposure, while driving the security posture across AWS services and third-party integrations.