Senior Security Engineer: Remote Cloud & App Security

Oshi Health; Illinois; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Job summary

Oshi Health is seeking its Director of IT & Security to own the security of a remote-first, cloud-native healthcare platform. You will shape security architecture, automate identity/secrets, and embed security into engineering and AI workflows from the ground up.

You will oversee threat modeling, secure design reviews, and secure code reviews, while aligning with HIPAA, SOC 2, and NIST frameworks. This role includes vulnerability management, vendor risk assessment, and direct collaboration with

Qualifications

• 6+ years in security engineering with depth in application/product security and cloud security (AWS).
• Experience in healthcare, fintech, or other regulated, data-sensitive environments is a strong plus.
• Familiarity with securing AI/LLM and agentic systems: prompt injection, agent authorization, and model/supply-chain risk.
• Comfortable being the sole security specialist on a small, cross-functional team and communicating tradeoffs clearly.
• Working knowledge of HIPAA Security Rule, SOC 2, and NIST Cybersecurity Framework.
• Proficient with scripting and automation (Python and at least one shell).
• GWAPT, GCSA, GCLD), AWS Certified Security – Specialty, CISSP, or Okta Certified Professional.

Responsibilities

• Own security architecture standards and harden identity and secrets management.
• Secure application and product security including threat modeling and secure code review.
• Design and own security architecture for agentic software development lifecycle.
• Build and run non-human identity and secrets management at scale across SaaS and AWS estate.
• Secure AWS environment including IAM, network segmentation, logging, encryption, and workload protection.
• Enforce and tune security tooling (CodeQL, secret scanning, push protection) across codebases.
• Review AI and third-party vendor integrations for PHI protection and data flows.
• Own vulnerability management and penetration testing findings through to closure.

Skills

Security engineering

Application security

Cloud security (AWS)

AI/LLM security

Vulnerability management

SAST/DAST

GitHub Advanced Security

Education

Bachelor's degree in Computer Science or equivalent

Tools

GitHub Advanced Security

CodeQL

Terraform

AWS

Job description

Oshi Health is seeking its Director of IT & Security to own the security of a remote-first, cloud-native healthcare platform. You will shape security architecture, automate identity/secrets, and embed security into engineering and AI workflows from the ground up.

You will oversee threat modeling, secure design reviews, and secure code reviews, while aligning with HIPAA, SOC 2, and NIST frameworks. This role includes vulnerability management, vendor risk assessment, and direct collaboration with