Staff Security Engineer

About Us:

Ambience Healthcare is the leading AI platform for documentation, coding, and clinical workflow, built to reduce administrative burden and protect revenue integrity at the point of care. Trusted by top health systems across North America, Ambience’s platform is live across outpatient, emergency, and inpatient settings, supporting more than 100 specialties with real-time, coding-aware documentation. The platform integrates directly with Epic, Oracle Cerner, athenahealth, and other major EHRs. Founded in 2020 by Mike Ng and Nikhil Buduma, Ambience is headquartered in San Francisco and backed by Oak HC/FT, Andreessen Horowitz (a16z), OpenAI Startup Fund, Kleiner Perkins, and other leading investors.

Join us in the endeavor of accelerating the path to safe & useful clinical super intelligence by becoming part of our community of problem solvers, technologists, clinicians, and innovators.

The Role:

Ambience runs real-time clinical workflows inside the most security-sensitive health systems in the country. That means security can’t be bolted on, it has to be engineered into the product.

As a Staff Security Engineer, you’ll own the systems that protect our platform at scale: application security, cloud security, detection and response, and the security primitives other teams build on. You’ll design guardrails that make the secure path the default, harden our infrastructure against real threats, and partner with engineering to eliminate entire classes of risk.

This is a builder role. You’ll write code, design systems, and lead cross-cutting security initiatives that directly enable enterprise trust and customer expansion.

What You’ll Own:

Application & Platform Security — Design and implement secure-by-default patterns across our backend and infrastructure. Identify and remediate vulnerabilities in application logic, APIs, and data flows.

Cloud & Infrastructure Security — Own security posture across our cloud environment: IAM, network boundaries, secrets management, and secure service-to-service communication.

Detection & Incident Response — Build and operate detection pipelines, alerts, and runbooks. Lead investigations, root cause analysis, and systemic fixes — not just one-off patches.

Security Tooling & Automation — Extend and integrate security tools through code. Automate controls, evidence collection, and remediation to reduce manual work and scale coverage.

Security Architecture & Leadership — Set technical direction for security across teams. Threat model new products, influence designs early, and raise the security bar company-wide.

Who You Are:

7+ years of hands-on experience in security engineering, with deep exposure to securing complex, high-growth technical environments

Staff-level scope: led cross-cutting security initiatives, influenced architecture, and embedded security best practices across teams

Strong software engineering fundamentals (CS degree or equivalent experience); comfortable reading, writing, and modifying production code in Python, Go, TypeScript, or similar

Proven experience in security architecture and systems hardening across applications, infrastructure, and cloud environments

Hands-on with vulnerability management and penetration testing: identifying, prioritizing, and driving remediation of real risks

Experience selecting and extending modern security tools for detection, incident response, automation, and threat monitoring

Strong cloud security background (AWS and/or GCP), including IAM, networking, and secure service design

Collaborative and pragmatic: able to partner with engineers, influence designs early, and explain security tradeoffs clearly

Why Here:

At most companies, security is reactive. At Ambience, it’s a product enabler. The systems you build determine whether we can earn — and keep — the trust of the largest health systems in the country.

You’ll have real ownership, direct access to leadership, and the chance to shape how security engineering is done at a company where it truly matters. Small team, high trust, and problems that are both technically deep and mission-critical.

Pay Transparency
We offer a base compensation range of approximately $225,000–$275,000 per year, along with meaningful equity. This intentionally broad range provides flexibility for candidates to tailor their cash and equity mix based on individual preferences. Our compensation philosophy prioritizes meaningful equity grants, enabling team members to share directly in the impact they help create. If your expectations fall outside of this range, we still encourage you to apply—our approach to compensation considers a range of factors to ensure alignment with each candidate's uniq