Senior Security Engineer — Cloud & App Security (Remote)

Oshi Health; Kansas City (MO); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Salary range: $170,000–$190,000

Health benefits

Flexible PTO + 11 holidays

401(k) retirement plan

Remote-first with US-state flexibility

Job summary

Oshi Health seeks its first dedicated Director of IT & Security to own the security of our cloud-native, remote healthcare platform. You will shape architecture, enforce access control, and drive security across engineering and AI workflows.

This hands-on role requires deep expertise in application security, cloud security, and risk management. You will coordinate vulnerability management, secure SDLC practices, and third-party security assessments while partnering with executives to balance

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 6+ years in security engineering with depth in application/product and cloud security (AWS).
• Experience with SAST/DAST, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM/agentic systems and HIPAA/SOC 2/NIST frameworks.

Responsibilities

• Own security architecture and set standards across the platform.
• Lead threat modeling, secure design reviews, and secure code reviews.
• Manage identity, access control, and secrets management at scale in AWS.
• Oversee vulnerability management and Pentest relationships.
• Ensure secure integrations with vendors and AI workflows.

Skills

Security engineering

Application security

Cloud security (AWS)

Threat modeling

Vulnerability management

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

AWS Certified Security – Specialty

CISSP

Job description

Oshi Health seeks its first dedicated Director of IT & Security to own the security of our cloud-native, remote healthcare platform. You will shape architecture, enforce access control, and drive security across engineering and AI workflows.

This hands-on role requires deep expertise in application security, cloud security, and risk management. You will coordinate vulnerability management, secure SDLC practices, and third-party security assessments while partnering with executives to balance