Senior Security Engineer – Cloud & AI Security (Remote)

Oshi Health; South Carolina; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Bonus

Equity

Remote-first

Health benefits

Job summary

Oshi Health, a remote-first digital health platform, seeks a Director of IT & Security to own the security of our cloud-native SaaS. This hands-on role combines security architecture, identity and secrets management, and secure software development practices across engineering and AI workflows.

You will lead threat modeling, secure design reviews, and secure code reviews for member data protection, enforce advanced controls in AWS, and oversee vulnerability management, third-party risk, and

Qualifications

• 6+ years in security engineering with focus on application/product and cloud security
• Experience with HIPAA/SOC 2/NIST frameworks
• Familiarity with securing AI/LLM and agentic systems
• Able to work as sole security specialist in a small cross-functional team
• Proficient in scripting and automation (Python) and shell scripting

Responsibilities

• Own application and product security, including threat modeling, secure design reviews, and secure code reviews
• Build security into engineering/AI workflows from the start
• Design and maintain security architecture for AWS environment (IAM, networking, logging, encryption)
• Manage identity and secrets (service accounts, tokens, OAuth, machine credentials)
• Oversee vulnerability management and penetration-testing program
• Review integrations from vendors touching PHI and assess data flows and DLP needs

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST

CodeQL

Secret scanning

Supply chain security

AI/LLM security

Scripting (Python)

Shell scripting

HIPAA/SOC2/NIST

Education

Bachelors in CS or equivalent experience

Tools

AWS

Terraform

GitHub Advanced Security

Job description

Oshi Health, a remote-first digital health platform, seeks a Director of IT & Security to own the security of our cloud-native SaaS. This hands-on role combines security architecture, identity and secrets management, and secure software development practices across engineering and AI workflows.

You will lead threat modeling, secure design reviews, and secure code reviews for member data protection, enforce advanced controls in AWS, and oversee vulnerability management, third-party risk, and