Senior/Staff Threat Detection Engineer

About Abridge

Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients.

Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems.

We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh.

The Role

Want to work on building out security from the ground up at the leading edge of AI in healthcare globally? We're looking for an experienced and highly motivated Senior or Staff Threat Detection and Response Engineer to join our team as one of the first engineers on the Abridge Security Operations team. In this role, you'll be a key technical leader, with the ultimate goal of increasing the costs to any adversary that chooses to target us or our customers.

This position requires deep technical expertise, a builder's mindset, and excellent communication skills to influence security culture across the organization. This is a greenfield opportunity to architect the way forward for Threat Detection and Response at Abridge. You will thrive here if you are passionate about building 0 → 1 and believe that modern security is, at its core, a large-scale data and automation challenge.

What You’ll Do

• Leading investigations of complex, organization-wide security events and establishing best practices across multiple security domains (log analysis, digital forensics, malware analysis)

• Designing and implementing the strategic roadmap for threat detection capabilities, creating high-fidelity detection systems based on deep understanding of advanced threat actor TTPs

• Architecting scalable incident response processes and driving automation across the entire IR lifecycle, establishing patterns for the organization

• Serving as incident commander for critical, cross-organizational security incidents and mentoring others in effective incident management practices

• Driving security research initiatives, discovering novel detection mechanisms and presenting findings to internal teams, executive leadership, and external audiences

• Defining build-vs-buy strategies for security tooling, leading major technical evaluations and driving organizational standards for security automation

• Scaling the security team's capabilities and maturity through technical leadership, mentorship, establishing engineering best practices, and raising the hiring bar

What You’ll Bring

• 9+ years in Detection Engineering, Incident Response, Advisory Emulation, Offensive Security and/or Threat Intelligence

• Experience in high-growth environments where you've scaled security capabilities alongside rapid organizational expansion, managing evolving threat landscapes and increasing complexity

• Exceptional communicator who can influence technical strategy across all organizational levels, from engineers to executive leadership

• Proven track record leading critical, multi-week incident response efforts and driving post-incident strategic improvements

• Deep technical expertise with demonstrated ability to architect scalable security systems and drive innovation in detection capabilities

• History of moving forward ambiguous, organization-wide initiatives through influence, technical vision, and cross-functional collaboration

• Expert-level knowledge of attacker tactics, techniques, and procedures across multiple threat actor groups

• Systems thinker who navigates complexity pragmatically while building toward elegant, maintainable solutions

• Strong experience with cloud security architecture and building production-grade automation and tooling

• Strong scripting skills in multiple scripting/programming languages (Python, Go, etc.)

Bonus Points If…

• Experience applying Generative AI to operational security problems.

• Participation in