Lead Security Engineer

Abridge; San Francisco (CA); On-site; USD 125,000 - 175,000; Full time

Job summary

Abridge is seeking a Lead Security Engineer to enhance security for their AI-driven healthcare platform. You will establish secure coding practices, lead security assessments, and work collaboratively across teams to ensure robust application security. Join a dynamic organization committed to transforming the healthcare experience through innovative technology.

Benefits

Generous Time Off

Comprehensive Health Plans

Paid Parental Leave

401k and Matching

Learning and Development Budget

Sabbatical Leave

Qualifications

• 7+ years of software engineering experience focused on cybersecurity.
• Experienced in regulated environments with compliance frameworks like SOC2 and HITRUST.
• Up-to-date on industry best practices.

Responsibilities

• Define and implement secure coding standards.
• Perform architectural and code reviews.
• Identify and remediate security vulnerabilities.

Skills

Cybersecurity

Secure coding practices

Threat modeling

Risk assessment

Vulnerability remediation

User empathy

Cross-functional communication

Job description

Join to apply for the Lead Security Engineer role at Abridge

3 days ago Be among the first 25 applicants

Join to apply for the Lead Security Engineer role at Abridge

Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients.

Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems.

We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the SoHo neighborhood of New York, the Mission District in San Francisco, and Lawrenceville in Pittsburgh.

The Role

Our generative AI-powered products are bringing joy back to the practice of medicine, and we’re looking for experienced security engineers to join our growing US-based engineering team. You’ll serve as a subject matter expert to help us build applications that are secure from current and future information security threats, and will be involved at all stages of the software development lifecycle.

What You'll Do

Every day is different at Abridge. Some of what you can expect to do:

• Help define and implement secure coding standards, and work with engineers and engineering management to advocate for and implement these standards.
• Perform architectural and code reviews, with a focus on secure development practices.
• Perform threat modeling and risk assessment, both standalone and as part of our larger security and compliance program.
• Identify and remediate security vulnerabilities through manual and automated testing.
• Incorporate automated tools such as SAST / DAST / RASP / SCA into the development process, such as by augmenting CI + CD pipelines.
• Lead triage of incoming issues, and work with engineering teams to remediate known or suspected security vulnerabilities.
• Train and mentor engineers on secure development practices.
• Research commercial and open-source solutions, and make build vs buy recommendations to bring new capabilities into the technology organization.
• Build deep user empathy and maintain a user-centric mindset
• Communicate regularly and effectively within and on behalf of our cross-functional product delivery teams. You’ll work with other disciplines including product, machine learning, and platform engineering, and will have opportunities to learn from and contribute to projects across the company.

What You’ll Bring

• 7+ years of software engineering experience, with several years of experience focusing on cybersecurity for cloud-native applications. You’ve seen what works, and probably a few things that didn’t work. Your opinions are grounded in experience.
• Passionate about software security, and experienced at multiple levels of the stack. You can determine whether a piece of code is vulnerable to a cross-site scripting attack; debate the relative merits of CBC vs GCM; and architect a system with appropriate data segregation for confidential data.
• Experienced working in a regulated environment. You have worked with compliance frameworks such as SOC2 and HITRUST.
• Up-to-date on industry best-practices and trends, and enjoy of learning new things
• Excited about being hands-on in a fast-moving, productive, and supportive environment
• Willing to pitch in wherever needed - as a fast-moving startup we need to do good work, quickly

We value people who want to learn new things, and we know that great team members might not perfectly match a job description. If you’re interested in the role but aren’t sure whether or not you’re a good fit, we’d still like to hear from you.

The salary range provided is based on transparent pay guidelines and is an estimate for candidates residing in the San Francisco and New York City metro areas. The actual base salary will vary depending on the candidate's location, relevant experience, skills, qualifications, and other job-related factors. Additionally, this role may include the opportunity to participate in a company stock option plan as part of the total compensation package.

Must be willing to work from our SF or NY office at least 3x per week

This position requires a commitment to a hybrid work model, with the expectation of coming into the office a minimum of (3) three times per week. Relocation assistance is available for candidates willing to move to San Francisco or New York.

Why work at Abridge?

At Abridge, we’re driven by our mission to bring understanding and follow-through to every medical conversation. Our culture is founded on doing things the “inverse” way in a legacy system—focusing on patients, instead of the system; focusing on outcomes, instead of billing; and focusing on the end-user experience, instead of a hospital administrator's mandate.

Abridgers are engineers, scientists, designers, and health policy experts from a diverse set of backgrounds—an experiment in alchemy that helps us transform an industry dominated by EHRs and enterprise into a consumer-driven experience, one recording at a time. We believe in strong ideas, loosely held, and place a high premium on a growth mindset. We push each other to grow and expose each other to the latest in our respective fields. Whether it’s holding a PhD-level deep dive into understanding fairness and underlying bias in machine learning models, debating the merits of a Scandinavian design philosophy in our UI/UX, or writing responses for Medicare rules to influence U.S. health policy, we prioritize sharing our findings across the team and helping each other be successful.

How we take care of Abridgers:

• Generous Time Off: 13 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees.
• Comprehensive Health Plans: Medical, Dental, and Vision plans for all full-time employees. Abridge covers 100% of the premium for you and 75% for dependents. If you choose a HSA-eligible plan, Abridge also makes monthly contributions to your HSA.
• Paid Parental Leave: 16 weeks paid parental leave for all full-time employees.
• 401k and Matching: Contribution matching to help invest in your future.
• Pre-tax Benefits: Access to Flexible Spending Accounts (FSA) and Commuter Benefits.
• Learning and Development Budget: Yearly contributions for coaching, courses, workshops, conferences, and more.
• Sabbatical Leave: 30 days of paid Sabbatical Leave after 5 years of employment.
• Compensation and Equity: Competitive compensation and equity grants for full time employees.
• ... and much more!

Diversity & Inclusion

Abridge is an equal opportunity employer. Diversity and inclusion is at the core of what we do. We actively welcome applicants from all backgrounds (including but not limited to race, gender, educational background, and sexual orientation).

Staying safe - Protect yourself from recruitment fraud

We are aware of individuals and entities fraudulently representing themselves as Abridge recruiters and/or hiring managers. Abridge will never ask for financial information or payment, or for personal information such as bank account number or social security number during the job application or interview process. Any emails from the Abridge recruiting team will come from an @abridge.com email address. You can learn more about how to protect yourself from these types of fraud by referring to this article. Please exercise caution and cease communications if something feels suspicious about your interactions.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Engineering and Other

• Industries

  Hospitals and Health Care

Referrals increase your chances of interviewing at Abridge by 2x

Inferred from the description for this job

401(k)

Medical insurance

Vision insurance

Get notified about new Security Engineer jobs in San Francisco Bay Area.

San Francisco, CA $125,000.00-$175,000.00 4 days ago

Alameda, CA $100,000.00-$180,000.00 6 days ago

San Jose, CA $133,900.00-$242,000.00 2 days ago

Menlo Park, CA $177,000.00-$251,000.00 2 weeks ago

Sunnyvale, CA $105,000.00-$130,000.00 5 hours ago

Menlo Park, CA $117,000.00-$173,000.00 2 weeks ago

Software Engineer Intern, Site Reliability Engineer

San Francisco, CA $150,000.00-$250,000.00 4 months ago

Senior Security Engineer, Corporate Security

San Francisco, CA $160,000.00-$230,000.00 9 hours ago

San Ramon, CA $100,000.00-$150,000.00 1 week ago

Oakland, CA $60,000.00-$65,000.00 1 week ago

Pleasanton, CA $120,000.00-$180,000.00 4 days ago

Full-Stack Engineer (L5), Identity & Security Experiences

Sunnyvale, CA $117,000.00-$234,000.00 1 week ago

San Francisco, CA $164,000.00-$216,000.00 4 weeks ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.