Staff Security Engineer
Ambience Healthcare1 day ago
Base Salary
$226k - $283k/yr
Responsibilities
- Guide high-risk initiatives from design and architecture through implementation and verification using threat models, security requirements, sensitive code review, prototypes, automation, and pull requests.
- Own and prioritize findings from product reviews, bug bounty programs, penetration tests, audits, cloud tooling, and hands-on testing through verified remediation or explicit risk acceptance.
- Expand security coverage through developer guidance, enablement, automation, tooling integration, tuning, triage, maintenance, measurement, and retirement of ineffective tools.
- Partner with Platform and Infrastructure Engineering to reduce AWS risks involving IAM, network segmentation, workload isolation, secrets, logging, configuration, and CNAPP operations.
- Reduce risk across production, development, software delivery, enterprise AI, and internal systems; support incident scoping and remediation and convert lessons learned into durable improvements.
- Use offensive validation techniques including vulnerability reproduction, dynamic testing, proof-of-concept exploits, and exploitability assessment.
Requirements
- Typically 8+ years of experience with staff-level product security judgment and the ability to work independently across complex security challenges.
- Recent production software, automation, or engineering experience with strong skills in at least one of Go, Python, Java, or TypeScript.
- Expertise in authentication and authorization concepts including OAuth, OIDC, SAML, JWT, RBAC, and ReBAC, plus API security, threat modeling, secure code review, vulnerability testing, and multi-tenant SaaS handling sensitive data.
- Working knowledge of cloud security concepts including IAM, network architecture, workload isolation, secrets, and logging, or demonstrated ability to develop that expertise quickly.
- Ability to reproduce vulnerabilities, perform targeted dynamic testing, build proof-of-concept exploits, and distinguish exploitable risk from theoretical concerns.
- Demonstrated ability to influence engineering teams to understand, prioritize, remediate, and verify material security risks.
- Experience owning security tooling or automation beyond deployment, including integration, tuning, triage, maintenance, and evaluation.
- Ability to use AI to accelerate security work while validating outputs against first principles and remaining accountable for technical decisions.
- Nice-to-have experience securing healthcare systems, PHI, regulated data, relationship-based or fine-grained authorization systems, enterprise AI applications, or AI-enabled products.
- Nice-to-have offensive security or red-team experience and deep AWS security experience including IAM, network architecture, workload isolation, configuration management, and CNAPP operations.
- Must be based in the Bay Area and able to work from the San Francisco office three days per week.
Benefits
- Comprehensive medical, dental, and vision coverage for employees and dependents.
- 401(k) with company matching of up to 3% of base salary.
- Remote-friendly culture with a San Francisco headquarters and full equipment provisioning.
- Parental leave, flexible time off with no annual cap, company holidays, and an annual holiday shutdown from December 24 through January 1.
- Annual company-wide and team off-sites, team lunches, and all-hands gatherings with travel, lodging, and meals covered.
- Meaningful equity grant included with every offer.
- San Francisco office schedule of three days per week and remote-friendly work options.
About Ambience Healthcare
Ambience Healthcare builds an AI platform for clinical documentation, medical scribing, and coding that reduces administrative work for clinicians in outpatient, emergency, and inpatient settings. It sells enterprise software to health systems and clinics, with real-time, coding‑aware notes and patient summaries that integrate with Epic, Oracle Cerner, athenahealth, and other EHRs. Founded in 2020 and headquartered in San Francisco, it supports 100+ specialties across North America.