Senior Security Engineer - Cloud & App Security (Remote)

Oshi Health; Eagle (ID); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO & holidays

401(k)

Job summary

Oshi Health is seeking its Director of IT & Security, the first dedicated security engineer for its fully remote, cloud-native healthcare platform. You will own security architecture, identity/secrets management, and secure coding practices across AWS and AI workflows.

You will lead threat modeling, secure design reviews, and non-human identity management, ensuring PHI protection and regulatory alignment. This role requires hands-on expertise and the ability to work autonomously in a small team.

Qualifications

• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems (prompt injection, agent authorization, risk).
• Able to be the sole security specialist on a small, cross-functional team; communicate tradeoffs clearly.
• Knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient in scripting/automation (Python and at least one shell).

Responsibilities

• Own security architecture and identity/secrets management for a cloud-native, SaaS platform.
• Lead threat modeling, secure design/code reviews focusing on access-control and secrets exposure.
• Design security for agentic SDLC with phase-gate criteria and AI code controls.
• Build/run non-human identity management across SaaS and AWS estate.
• Secure AWS environment end-to-end: IAM, network segmentation, logging, encryption, workload protection.
• Tune security tooling (GitHub Advanced Security, CodeQL, secret scanning, branch protections).
• Review AI/vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and drive findings to closure with feedback to devs.

Skills

Security engineering

Application security

AWS cloud security

Threat modeling

Code review

AI/LLM security

Scripting: Python

Secret management

SAST/DAST

HIPAA/SOC2/NIST

Education

Bachelor's degree in Computer Science

Tools

AWS

Terraform

Python

CodeQL

Job description

Oshi Health is seeking its Director of IT & Security, the first dedicated security engineer for its fully remote, cloud-native healthcare platform. You will own security architecture, identity/secrets management, and secure coding practices across AWS and AI workflows.

You will lead threat modeling, secure design reviews, and non-human identity management, ensuring PHI protection and regulatory alignment. This role requires hands-on expertise and the ability to work autonomously in a small team.