Senior Security Engineer – Cloud & AI Security (Remote)

Oshi Health; New Jersey; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Bonus

Equity

Remote-first policy

Job summary

Oshi Health seeks a Director of IT & Security to own the security architecture of its fully remote SaaS platform. You will lead threat modeling, secure design reviews, and code reviews, with emphasis on access control and secrets management for a patient-facing app and APIs.

You will design the security architecture for an agentic SDLC, implement non-human identity controls, and safeguard AWS resources across S3, EKS, and Terraform.

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, authorizations, risk.
• Ability to be the sole security specialist on a small, cross-functional team and explain tradeoffs.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient with scripting and automation (Python and at least one shell).
• Certifications such as GWAPT, GCSA, GCLD, AWS Certified Security – Specialty, CISSP, or Okta Certified Professional.

Responsibilities

• Own application and product security, including threat modeling and secure code review.
• Design and own security architecture for an agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure AWS environment end to end: IAM, networking, logging, encryption, workload protection.
• Enforce and tune security tooling (CodeQL, secret scanning, branch protection).
• Review AI and third-party vendor integrations touching PHI and data flows.
• Oversee vulnerability management and penetration testing findings to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

AI/LLM security

Risk prioritization

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Secret scanning

Job description

Oshi Health seeks a Director of IT & Security to own the security architecture of its fully remote SaaS platform. You will lead threat modeling, secure design reviews, and code reviews, with emphasis on access control and secrets management for a patient-facing app and APIs.

You will design the security architecture for an agentic SDLC, implement non-human identity controls, and safeguard AWS resources across S3, EKS, and Terraform.