Staff Security Engineer

About Abridge

Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients.

Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems.

We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh.

The Role

Our generative AI-powered products are bringing joy back to the practice of medicine, and we’re looking for experienced security engineers to join our growing US-based engineering team. You’ll serve as a subject matter expert to help us build applications that are secure from current and future information security threats, and will be involved at all stages of the software development lifecycle.

What You'll Do

Every day is different at Abridge. Some of what you can expect to do:

• Help define and implement secure coding standards, and work with engineers and engineering management to advocate for and implement these standards.

• Perform architectural and code reviews, with a focus on secure development practices.

• Perform threat modeling and risk assessment, both standalone and as part of our larger security and compliance program.

• Identify and remediate security vulnerabilities through manual and automated testing.

• Incorporate automated tools such as SAST / DAST / RASP / SCA into the development process, such as by augmenting CI + CD pipelines.

• Lead triage of incoming issues, and work with engineering teams to remediate known or suspected security vulnerabilities.

• Train and mentor engineers on secure development practices. 

• Research commercial and open-source solutions, and make build vs buy recommendations to bring new capabilities into the technology organization.

• Build deep user empathy and maintain a user-centric mindset

• Communicate regularly and effectively within and on behalf of our cross-functional product delivery teams. You’ll work with other disciplines including product, machine learning, and platform engineering, and will have opportunities to learn from and contribute to projects across the company.

What You’ll Bring

• 7+ years of software engineering experience, with several years of experience focusing on cybersecurity for cloud-native applications. You’ve seen what works, and probably a few things that didn’t work. Your opinions are grounded in experience.

• Passionate about software security, and experienced at multiple levels of the stack. You can determine whether a piece of code is vulnerable to a cross-site scripting attack; debate the relative merits of CBC vs GCM; and architect a system with appropriate data segregation for confidential data.

• Experienced working in a regulated environment. You have worked with compliance frameworks such as SOC2 and HITRUST.

• Up-to-date on industry best-practices and trends, and enjoy of learning new things

• Excited about being hands-on in a fast-moving, productive, and supportive environment

• Willing to pitch in wherever needed - as a fast-moving startup we need to do good work, quickly

Must be willing to work from our SF or NY office at least 3x per week

This position requires a commitment to a hybrid work model, with the expectation of coming into the office a minimum of (3) three times per week. Relocation assistance is available for candidates willing to move to San Francisco or New York.

We value people who want to learn new things, and we know that great team members might not perfectly match a job description. If you’re interested in the role but aren’t sure whether or not you’re a good fit, we’d still like to hear from you.

Why Work at Abridge?

At Abridge, we’re transforming healthcare delivery experiences with generative AI, enabling clinicians and patients to connect in deeper, more meaningful ways. Our mission is clear: to power deeper und