Senior Cloud & Application Security Engineer (Remote)

Oshi Health; Colorado; Remote; USD 170,000 - 190,000; Full time

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will lead security architecture, identity and secrets management, and secure development practices across AWS and SaaS environments.

This role requires hands-on expertise in application security, threat modeling, and securing AI/LLM workflows, with responsibility for vulnerability management, vendor risk reviews, and HIPAA/NIST-aligned controls.

Qualifications

• 6+ years in security engineering with depth in application/product and cloud security (AWS)
• Healthcare, fintech, or regulated data environment experience is a strong plus
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model risk
• Sole security specialist on a small cross-functional team, able to explain tradeoffs to engineers and executives
• Working knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework
• Proficient with scripting and automation (Python and at least one shell)

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review
• Design and own security architecture for agentic software development lifecycle with phase-gate criteria and risk controls
• Build and run non-human identity and secrets management at scale across SaaS and AWS
• Secure AWS environment end to end: IAM, network segmentation, logging, encryption, workload protection
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, branch protection, CODEOWNERS)
• Oversee vulnerability management and penetration testing, driving findings to closure
• Review AI and third-party vendor integrations touching PHI for data flows and DLP needs

Skills

AWS security

Application security

Secure coding

SAST/DAST

GitHub Advanced Security/CodeQL

Secret scanning

Software supply chain security

Python scripting

Shell scripting

Healthcare security knowledge

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

Terraform

AWS

Job description

Oshi Health is seeking a Director of IT & Security to own the security of our fully remote, cloud-native healthcare platform. You will lead security architecture, identity and secrets management, and secure development practices across AWS and SaaS environments.

This role requires hands-on expertise in application security, threat modeling, and securing AI/LLM workflows, with responsibility for vulnerability management, vendor risk reviews, and HIPAA/NIST-aligned controls.