Senior Security Engineer

Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients.

Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems.

We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the SoHo neighborhood of New York, the Mission District in San Francisco, and Lawrenceville in Pittsburgh.

The Role

Our generative AI-powered products are bringing joy back to the practice of medicine, and we’re looking for experienced security engineers to join our growing US-based engineering team. You’ll serve as a subject matter expert to help us build applications that are secure from current and future information security threats, and will be involved at all stages of the software development lifecycle.

What You'll Do

Every day is different at Abridge. Some of what you can expect to do:

• Help define and implement secure coding standards, and work with engineers and engineering management to advocate for and implement these standards.

• Perform architectural and code reviews, with a focus on secure development practices.

• Perform threat modeling and risk assessment, both standalone and as part of our larger security and compliance program.

• Identify and remediate security vulnerabilities through manual and automated testing.

• Incorporate automated tools such as SAST / DAST / RASP / SCA into the development process, such as by augmenting CI + CD pipelines.

• Lead triage of incoming issues, and work with engineering teams to remediate known or suspected security vulnerabilities.

• Train and mentor engineers on secure development practices. 

• Research commercial and open-source solutions, and make build vs buy recommendations to bring new capabilities into the technology organization.

• Build deep user empathy and maintain a user-centric mindset

• Communicate regularly and effectively within and on behalf of our cross-functional product delivery teams. You’ll work with other disciplines including product, machine learning, and platform engineering, and will have opportunities to learn from and contribute to projects across the company.

What You’ll Bring

• 7+ years of software engineering experience, with several years of experience focusing on cybersecurity for cloud-native applications. You’ve seen what works, and probably a few things that didn’t work. Your opinions are grounded in experience.

• Passionate about software security, and experienced at multiple levels of the stack. You can determine whether a piece of code is vulnerable to a cross-site scripting attack; debate the relative merits of CBC vs GCM; and architect a system with appropriate data segregation for confidential data.

• Experienced working in a regulated environment. You have worked with compliance frameworks such as SOC2 and HITRUST.

• Up-to-date on industry best-practices and trends, and enjoy of learning new things

• Excited about being hands-on in a fast-moving, productive, and supportive environment

• Willing to pitch in wherever needed - as a fast-moving startup we need to do good work, quickly

We value people who want to learn new things, and we know that great team members might not perfectly match a job description. If you’re interested in the role but aren’t sure whether or not you’re a good fit, we’d still like to hear from you.

Base Salary: $185,000 USD - $265,000+ USD per year + Equity

The salary range provided is based on transparent pay guidelines and is an estimate for candidates residing in the San Francisco and New York City metro areas. The actual base salary will vary depending on the candidate's location, relevant experience, skills, qualifications, and other job-related factors. Additionally, this role may include the opportunity to participate in a company stock option plan as part of the total compensation package.

Must be willing to work from our SF or NY