Senior Security Engineer – Cloud & App Security (Remote)

Oshi Health; Pennsylvania; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits (medical, dental, and

Flexible PTO & holidays

401(k) retirement plan

Job summary

Oshi Health is hiring a Director of IT & Security to own the security architecture of a fully remote, cloud-native healthcare platform. You will lead application security, harden identity and secrets management, and integrate security into AI workflows from the ground up.

You will manage non-human identity and secrets, secure our AWS stack (S3, EKS, Terraform), and guide risk-focused tradeoffs with engineers and executives.

Qualifications

• ~6+ years in security engineering with depth in application/product and cloud security (AWS).
• Healthcare, fintech, or regulated data environments are a strong plus.
• SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain security.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, over-permissioning, model risk.
• Sole security specialist on a small, cross-functional team; able to explain tradeoffs to engineers and execs.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST CSF.
• Proficient with scripting and automation (Python and at least one shell).

Responsibilities

• Own application and product security, including threat modeling, secure design review, and secure code review.
• Design and own security architecture for agentic software lifecycle and risk controls.
• Build and run non-human identity and secrets management at scale across SaaS and AWS.
• Secure our AWS environment end to end: IAM, network segmentation, logging, encryption, workload protection.
• Enforce and tune security tooling: CodeQL, secret scanning, push protection, and CODEOWNERS reviews.
• Review AI and third-party vendor integrations touching PHI for data flows and data-loss prevention.
• Own vulnerability management and the penetration-testing relationship; drive findings to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

SAST/DAST

CodeQL / GitHub Advanced Security

Secrets management

AI/LLM security

Scripting (Python)

Education

Bachelor's degree in Computer Science or equivalent practical experience

Tools

Security certifications

Compliance automation platform

Job description

Oshi Health is hiring a Director of IT & Security to own the security architecture of a fully remote, cloud-native healthcare platform. You will lead application security, harden identity and secrets management, and integrate security into AI workflows from the ground up.

You will manage non-human identity and secrets, secure our AWS stack (S3, EKS, Terraform), and guide risk-focused tradeoffs with engineers and executives.