Senior Cloud & Application Security Engineer (Remote)

Oshi Health; Clifton (TX); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Remote-first policy

401(k) retirement plan

Job summary

Oshi Health is hiring its Director of IT & Security to own the security architecture of our remote, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and secure code reviews for a member-facing app and its APIs.

You will build scalable identity and secrets management, secure AWS operations, and enforce robust security tooling while aligning with HIPAA, SOC 2, and NIST standards. This role fits a hands-on, builder-focused security leader.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• ~6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model risk.
• Comfortable as sole security specialist on a small, cross-functional team and able to explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).
• Certifications: GWAPT, GCSA, GCLD, AWS Certified Security – Specialty, CISSP, or Okta Certified Professional.

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end to end (IAM, network segmentation, logging, encryption).
• Enforce and tune security tooling (CodeQL, secret scanning, push protection, CODEOWNERS).
• Review AI/vendor integrations touching PHI and evaluate data flows and DLP needs.
• Own vulnerability management and drive findings to closure.

Skills

Security engineering

Application security

Cloud security

Scripting (Python)

Shell scripting

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

AWS

GitHub Advanced Security

CodeQL

Secret scanning

Software supply-chain security

Job description

Oshi Health is hiring its Director of IT & Security to own the security architecture of our remote, cloud-native healthcare platform. You will lead threat modeling, secure design reviews, and secure code reviews for a member-facing app and its APIs.

You will build scalable identity and secrets management, secure AWS operations, and enforce robust security tooling while aligning with HIPAA, SOC 2, and NIST standards. This role fits a hands-on, builder-focused security leader.