Senior Cloud & Application Security Engineer - Remote

Oshi Health; Maryland; Remote; USD 170.000 - 190.000; Vollzeit

Benefits dieser Stelle

Health benefits

Flexible PTO

401(k)

Zusammenfassung

Oshi Health is seeking its Director of IT & Security to own the security of a fully remote, cloud-native healthcare platform. This hands-on role focuses on security architecture, identity and secrets management, and secure integration into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, secure code review, and end-to-end protection across AWS, S3, EKS, and Terraform, while ensuring vendor integrations handling PHI meet data-protection standards.

Qualifikationen

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience in healthcare, fintech, or another regulated, data-sensitive environment is a strong plus.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization and over-permissioning, model/supply-chain risk.
• Able to be the sole security specialist on a small, cross-functional team and explain tradeoffs to engineers and executives.
• Working knowledge of HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).

Aufgaben

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle with phase-gate criteria and out-of-band controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection (S3, EKS, Terraform).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, push protection).
• Review AI and third-party vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and penetration-testing relationship and feed learnings into development.

Kenntnisse

Security engineering

Cloud security (AWS)

SAST/DAST & CodeQL

AI/LLM security

Scripting (Python)

HIPAA/SOC2/NIST familiarity

Ausbildung

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Software supply chain security

AWS

Jobbeschreibung

Oshi Health is seeking its Director of IT & Security to own the security of a fully remote, cloud-native healthcare platform. This hands-on role focuses on security architecture, identity and secrets management, and secure integration into engineering and AI workflows from day one.

You will lead threat modeling, secure design reviews, secure code review, and end-to-end protection across AWS, S3, EKS, and Terraform, while ensuring vendor integrations handling PHI meet data-protection standards.