Senior Security Engineer, AI/Cloud for Healthcare

Oshi Health; Texas; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (90% premiums)

401(k)

Flexible PTO

Remote-first

Job summary

Oshi Health is seeking a Director of IT & Security to own the security of our remote, cloud-native healthcare platform. You will lead security architecture, identity/secrets management, and secure AI workflows, building security into engineering practices from the ground up.

You will supervise threat modeling, secure design/code reviews, and vulnerability management, ensuring HIPAA/SOC-2/NIST alignment while enabling rapid, safe product development.

Qualifications

• ~6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience in healthcare, fintech, or regulated data environments is a strong plus.
• Familiarity with securing AI/LLM and agentic systems: prompt injection and model risk.
• Able to explain tradeoffs to engineers and executives clearly.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.

Responsibilities

• Own security architecture for our SaaS and cloud-native platform.
• Lead threat modeling, secure design reviews, and secure code review.
• Manage identity and secrets at scale across AWS and SaaS.
• Oversee vulnerability management and pen-testing relationships.
• Ensure compliance with HIPAA, SOC 2, and NIST standards.

Skills

Security engineering

Application security

Cloud security

SAST/DAST

CodeQL

Secret scanning

Supply chain security

Healthcare security

Regulatory compliance

Python scripting

Education

Bachelor's degree in Computer Science

Tools

AWS

Terraform

GitHub Advanced Security

Job description

Oshi Health is seeking a Director of IT & Security to own the security of our remote, cloud-native healthcare platform. You will lead security architecture, identity/secrets management, and secure AI workflows, building security into engineering practices from the ground up.

You will supervise threat modeling, secure design/code reviews, and vulnerability management, ensuring HIPAA/SOC-2/NIST alignment while enabling rapid, safe product development.