Senior / Staff Cloud Security Engineer

About Abridge

Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters mosttheir patients.

Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems.

We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh.

The Role

Want to work on building out security from the ground up at the leading edge of AI in healthcare globally? We're looking for a very experienced and highly motivated Senior or Staff Cloud Security Engineer to join our team as one of the first engineers on the Abridge Security team. In this role, you'll be a key technical leader, driving key initiatives that shape our product, infrastructure, and engineering practices. Impact both the vision and hands-on execution of securing our cloud infrastructure across the entire product portfolio. You'll work cross-functionally with product and engineering teams to integrate security seamlessly, automate security capabilities and controls, and mentor others to build secure-by-default infrastructure at scale in the age of AI. This position requires deep technical expertise, a builder's mindset, and excellent communication skills to influence security culture across the organization.

What Youll Do

Secure Development & Architecture Leadership

Lead Threat Modeling and Design Reviews : Impact the product from ideation through to code that is shipping to production. Conduct threat modeling and security architecture reviews for multi-cloud complex systems, new infrastructure, and platform initiatives, providing expert guidance and requirements to meet Abridges security goals.

Define Security Strategy : Define and implement the technical roadmap for the Cloud Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails.

Mentor and Enable : Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on cloud and infrastructure security, architecture, vulnerability remediation strategies, reliability, and resilience.

Security Automation and Tooling

Build Security Pipelines & Automation : Design, implement, and maintain advanced security automation tools and services, integrating them seamlessly into infrastructure-as-code pipelines.

Tool Management & Tuning : Own the deployment, configuration, and maintenance of CloudSec tooling, tuning scanners and custom rules to reduce false positives and maximize efficacy across various technology stacks

Drive Proactive Security : Develop custom scripts and tooling to automate security tasks and processes, accelerate configuration monitoring and vulnerability detection, and enforce policy-as-code across the development environment.

Vulnerability Management & Incident Response

Code and Security Reviews : Perform and lead in-depth security and code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws in infrastructure, networks, configurations, policies, etc. Get hands on with assessing infrastructure associated with AI models, agents, and architectures.

Vulnerability Program Oversight : Work across security and engineering teams, advise on the end-to-end vulnerability management program for Abridges products and applications, infrastructure and networks, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible.

Security Incident Response : Serve as an expert on Abridges cloud environments, infrastructure, and networks for the security incident response team, assisting in investigating and resolving security events and incidents.

What Youll Bring

Experience : 7+ years of direct experience in a Cloud Security / Infrastructure Security role, with a demonstrated history of designing and implementing security improvements at scale.

Programming Fluency : Deep proficiency in one or more major programming languages (Python and / or NextJS a big plus) and a solid background in software development principles.

Infrastructure-as-Code : Direct experience with Terraform, infrastructure-as-code pipelines, and associated automation.

Cloud & Containers : Extensive experience securing cloud environments (GCP, AWS) and knowledge of containerization technologies (Kubernetes, Docker).

Technical Depth : Expert-level knowledge of cloud and infrastructure security techniques and principles, network security, etc.

Bonus Points If

AI Security : Deep understanding of the security of AI models, agents, and associated infrastructure.

Offensive Security : Experience with red teaming / penetration testing of clouds, infrastructure, networks a plus.

Security Research : Proven experience contributing to or leveraging open-source security tools, publishing security research, and active engagement in the security industry.

Cross-Functional Influence : Demonstrated ability to drive large, cross-functional technical projects that impact security posture across the entire organization.

Data-Driven Security : Experience defining and utilizing security metrics to measure and report on the effectiveness of the AppSec program to both technical and executive audiences.

Why Work at Abridge?

At Abridge, were transforming healthcare delivery experiences with generative AI, enabling clinicians and patients to connect in deeper, more meaningful ways. Our mission is clear : to power deeper understanding in healthcare. Were driving real, lasting change, with millions of medical conversations processed each month.

Joining Abridge means stepping into a fast-paced, high-growth startup where your contributions truly make a difference. Our culture requires extreme ownershipevery employee has the ability to (and is expected to) make an impact on our customers and our business.

Beyond individual impact, you will have the opportunity to work alongside a team of curious, high-achieving people in a supportive environment where success is shared, growth is constant, and feedback fuels progress. At Abridge, its not just what we doits how we do it. Every decision is rooted in empathy, always prioritizing the needs of clinicians and patients.

Were committed to supporting your growth, both professionally and personally. Whether it's flexible work hours, an inclusive culture, or ongoing learning opportunities, we are here to help you thrive and do the best work of your life.

If you are ready to make a meaningful impact alongside passionate people who care deeply about what they do, Abridge is the place for you.

How we take care of Abridgers :

Generous Time Off : 13 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees.

Comprehensive Health Plans : Medical, Dental, and Vision plans for all full-time employees. Abridge covers 100% of the premium for you and 75% for dependents. If you choose a HSA-eligible plan, Abridge also makes monthly contributions to your HSA.

Paid Parental Leave : 16 weeks paid parental leave for all full-time employees.

401k and Matching : Contribution matching to help invest in your future.

Pre-tax Benefits : Access to Flexible Spending Accounts (FSA) and Commuter Benefits.

Learning and Development Budget : Yearly contributions for coaching, courses, workshops, conferences, and more.

Sabbatical Leave : 30 days of paid Sabbatical Leave after 5 years of employment.

Compensation and Equity : Competitive compensation and equity grants for full time employees.

• ... and much more!

Equal Opportunity Employer

Abridge is an equal opportunity employer and considers all qualified applicants equally without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability.

Staying safe - Protect yourself from recruitment fraud

We are aware of individuals and entities fraudulently representing themselves as Abridge recruiters and / or hiring managers. Abridge will never ask for financial information or payment, or for personal information such as bank account number or social security number during the job application or interview process. Any emails from the Abridge recruiting team will come from an @abridge.com email address. You can learn more about how to protect yourself from these types of fraud by referring to this article. Please exercise caution and cease communications if something feels suspicious about your interactions.