Senior Security Engineer — Cloud, AI & Healthcare

Oshi Health; Louisiana; Remote; USD 170.000 - 190.000; Vollzeit

Benefits dieser Stelle

Health Benefits

Remote-first flexibility

Flexible PTO

401(k) eligibility

Equity/bonus

Zusammenfassung

Oshi Health seeks a Director of IT & Security to own the security architecture for a fully remote, cloud-native healthcare platform. This role emphasizes hands-on security engineering over policy, shaping identity/secrets management, secure coding practices, and integration security for AI workflows.

You will lead threat modeling, secure design and code reviews, and drive risk-based decisions across the engineering team while protecting PHI in AWS/SaaS environments.

Qualifikationen

• Bachelor's degree in Computer Science or equivalent practical experience.
• Experience in security engineering with cloud security (AWS) and application security.
• Familiarity with HIPAA Security Rule, SOC 2, and NIST CSF.

Aufgaben

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment end to end (IAM, networking, logging, encryption).
• Enforce and tune security tooling (GitHub Advanced Security, CodeQL, secret scanning).
• Review AI and third-party vendor integrations touching PHI for data flows and DLP needs.
• Own vulnerability management and penetration-testing relationships.

Kenntnisse

Security engineering

Application security

Cloud security (AWS)

Threat modeling

Secure design review

Secure code review

Identity and secrets management

AI/LLM security

Scripting (Python)

Shell scripting

HIPAA/NIST/SOC2 familiarity

Ausbildung

Bachelor's degree in Computer Science or related field

Tools

GitHub Advanced Security/CodeQL

Jobbeschreibung

Oshi Health seeks a Director of IT & Security to own the security architecture for a fully remote, cloud-native healthcare platform. This role emphasizes hands-on security engineering over policy, shaping identity/secrets management, secure coding practices, and integration security for AI workflows.

You will lead threat modeling, secure design and code reviews, and drive risk-based decisions across the engineering team while protecting PHI in AWS/SaaS environments.