over 1 year ago
Base Salary
$214k - $252k/yr
Responsibilities
- Lead threat modeling and security architecture reviews for complex systems, new products, and platform initiatives
- Define and implement the technical roadmap, standards, and guardrails for the Application Security program
- Advise and mentor product and engineering teams on secure coding, security features, application architecture, and vulnerability remediation
- Develop security training and awareness materials for engineers
- Conduct manual and tool-assisted secure code reviews, including assessment of AI models, agents, and architectures
- Lead internal penetration testing for new products and existing systems
- Design and improve the end-to-end vulnerability management program
- Support the security incident response team in investigating and resolving product and application security incidents
Requirements
- 7+ years of direct application security experience designing and implementing security improvements at scale
- Deep proficiency in one or more major programming languages, with Python and Next.js listed as a plus
- Experience securing applications in cloud environments, with GCP listed as a plus
- Knowledge of containerization technologies, including Kubernetes
- Expert-level knowledge of web application security, APIs, IAM, identity, authentication, authorization, RBAC, ABAC, and applied cryptography
- Deep understanding of security for AI and ML models, agents, and associated systems
- Preferred experience with open-source security tools, security research, bug bounty programs, security industry engagement, cross-functional technical projects, and security metrics
Benefits
- 14 paid holidays and flexible PTO for salaried employees
- Medical, dental, and vision coverage for full-time employees and families
- HSA contributions for employees enrolled in a high-deductible health plan
- Paid parental leave and family-forming benefits
- 401(k) matching
- Personal device allowance and pre-tax FSA and commuter benefits
- Monthly lifestyle wallet contributions for fitness, professional development, coworking, and more
- Mental health therapy and coaching support
- Paid sabbatical leave after five years of employment
- Competitive compensation and equity grants for full-time employees
Tech Stack
Categories
About Abridge
Abridge builds an AI platform that converts patient–clinician conversations into EHR-ready clinical documentation for hospitals and clinicians. The enterprise SaaS includes automatic speech recognition and clinical note generation validated across 28+ languages, and integrates with major EHR systems. Founded in 2018 and headquartered in San Francisco, the privately held company sells to U.S. health systems, hospitals, and clinics.