Senior Security Engineer – App & Cloud (Remote)

Oshi Health; Annapolis (MD); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Remote-first culture

Flexible time off

Job summary

Oshi Health seeks a Director of IT & Security to lead security for its remote, healthcare SaaS platform. You will own threat modeling, design reviews, and secure code practices across AWS and AI workflows. Strong emphasis on access control, secrets management, and vendor security assessments.

Ideal candidates have 6+ years in security engineering, experience with HIPAA/NIST, and hands-on cloud security, with the ability to work autonomously in a small cross-functional team.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience in healthcare, fintech, or other regulated, data-sensitive environments is a strong plus.
• Familiarity with securing AI/LLM and agentic systems.
• Comfortable being the sole security specialist on a small, cross-functional team.

Responsibilities

• Own the security architecture for a cloud-native SaaS platform.
• Lead threat modeling, secure design reviews, and secure code reviews.
• Build and enforce access-control and secrets-management practices.
• Secure AWS environment including IAM, networking, logging, and encryption.
• Manage vulnerability programs and coordinate with development for remediation.
• Evaluate vendor integrations for data security and PHI handling.

Skills

Security engineering

Cloud security (AWS)

Threat modeling

Secure design review

Secure code review

Identity & secrets management

SAST/DAST

GitHub Advanced Security/CodeQL

Vulnerability management

Penetration testing liaison

Education

Bachelor's degree in Computer Science

Tools

AWS

Terraform

GitHub Advanced Security

CodeQL

Job description

Oshi Health seeks a Director of IT & Security to lead security for its remote, healthcare SaaS platform. You will own threat modeling, design reviews, and secure code practices across AWS and AI workflows. Strong emphasis on access control, secrets management, and vendor security assessments.

Ideal candidates have 6+ years in security engineering, experience with HIPAA/NIST, and hands-on cloud security, with the ability to work autonomously in a small cross-functional team.