Senior Application Security Engineer
New
O
Oshi HealthHealthcare technology
Work from home anywhere within our approved states in the USFull-TimeSenior
Salary$170,000 – $190,000 + bonus and meaningful equity
Apply NowOpens the employer's application page
Job Details
- Experience
- 6+ years in security engineering
- Required Skills
- AWSPython
Requirements
- Bachelor's degree in Computer Science or equivalent practical experience.
- 6+ years in security engineering, with demonstrated depth in application/product security and AWS cloud security.
- Hands-on experience with SAST/DAST, GitHub Advanced Security/CodeQL, secret scanning, and software supply-chain/dependency security.
- Strong identity and access management knowledge, including Okta, OAuth/OIDC, SAML, phishing-resistant MFA, non-human identities, and secrets.
- Familiarity with, or willingness to develop deep expertise in, AI/LLM and agentic system security, including prompt injection, agent authorization, over-permissioning, NHI sprawl, and model/supply-chain risk.
- Able to work as the sole security specialist on a small cross-functional team, prioritize by risk, and explain tradeoffs to technical and non-technical stakeholders.
- Working knowledge of the HIPAA Security Rule, SOC 2, and the NIST Cybersecurity Framework.
- Proficient in Python and at least one shell for scripting and automation.
- Preferred: experience in healthcare, fintech, or another regulated, data-sensitive environment.
- Preferred: OSCP, GIAC, AWS Certified Security – Specialty, CISSP, or Okta Certified Professional certification.
- Preferred: experience operating a compliance-automation platform.
Responsibilities
- Own application and product security, including threat modeling, secure design review, and secure code review.
- Design and own security architecture for the agentic software development lifecycle, including phase-gate criteria, independent controls, and tested clawback procedures.
- Build and run non-human identity and secrets management across SaaS and AWS environments.
- Secure AWS infrastructure, including IAM, network segmentation, logging, encryption, and workloads across S3, EKS, and Terraform.
- Enforce and tune GitHub Advanced Security, CodeQL, secret scanning, push protection, branch protection, and CODEOWNERS review.
- Review AI and third-party vendor integrations before they access PHI, evaluating data flows, retention, and data loss-prevention needs.
- Own vulnerability management and the penetration-testing relationship, drive findings to closure, and feed recurring issues into development.
- Support HIPAA Security Rule technical safeguards and establish detection, response, and security automation capabilities.
View Full Description & ApplyYou'll be redirected to the employer's site
