Staff Product Security Engineer – Cloud & AI

Ambience Healthcare, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 226,000 - 283,000; Full time

Benefits offered by this job

Equity grant

Job summary

Ambience Healthcare, Inc. is seeking a senior product security engineer to design, build, and operate secure products within security-sensitive healthcare environments.

You’ll own threat models, security requirements, and tooling while guiding high-risk changes and cloud-related security work. You’ll work with engineering from design through verification, applying deep CS fundamentals, security engineering, and AI-augmented practices to reduce risk across production systems and enterprise AI

Qualifications

• 8+ years of experience in product security, with independent, senior-level judgment.
• Strong engineering background with production code experience in backend or automation languages.
• Deep understanding of authentication/authorization (OAuth, OIDC, SAML, JWT, RBAC, ReBAC) and API security.
• Cloud security fluency across IAM, network, secrets, logging, and CNAPP concepts.
• Ability to model threats, perform secure code review, and manage multi-tenant SaaS security.

Responsibilities

• Design secure systems for high-risk changes from proposal to verification.
• Own security backlog from reviews, tests, audits, and cloud tooling; drive risk to resolution.
• Develop and own security tooling, automation, and integration improvements.
• Lead AWS migration security initiatives including IAM and network segmentation.
• Scope and remediate incidents and turn lessons into durable secure paths.

Skills

Staff-level security judgment

Engineering roots

Authentication & authorization

Cloud security

Threat modeling

Vulnerability testing

Security tooling ownership

AI-augmented security

Tools

Go

Python

Java

TypeScript

Job description

Ambience Healthcare, Inc. is seeking a senior product security engineer to design, build, and operate secure products within security-sensitive healthcare environments.

You’ll own threat models, security requirements, and tooling while guiding high-risk changes and cloud-related security work. You’ll work with engineering from design through verification, applying deep CS fundamentals, security engineering, and AI-augmented practices to reduce risk across production systems and enterprise AI