3 months ago
Base Salary
$228k - $290k/yr
Responsibilities
- Lead threat modeling and security architecture reviews for complex systems, new products, and platform initiatives
- Define and implement the technical roadmap for the Application Security program, including scalable assurance measures, standards, and guardrails
- Advise and mentor product and engineering teams on secure coding, security features, application architecture, and vulnerability remediation
- Develop security training and awareness materials for engineers
- Conduct and lead manual and tool-assisted secure code reviews, including assessments of AI models, agents, and architectures
- Lead internal penetration testing engagements for new products and existing systems
- Design and enhance the end-to-end vulnerability management program
- Support security incident response investigations and resolution for product and application security events
Requirements
- 10+ years of direct Application Security experience designing and implementing security improvements at scale
- Deep proficiency in one or more major programming languages, with Python and NextJS noted as a plus
- Strong software development background
- Extensive experience securing applications in cloud environments, with GCP as a plus
- Knowledge of containerization technologies, including Kubernetes
- Expert knowledge of web application security, APIs, IAM, identity, authentication and authorization, RBAC, ABAC, and applied cryptography
- Deep understanding of the security of AI and ML models, agents, and associated systems
- Experience contributing to or leveraging open-source security tools, publishing security research, managing bug bounty programs, or engaging actively in the security industry is a bonus
- Experience driving large cross-functional technical projects and defining security metrics for technical and executive audiences is a bonus
Benefits
- 14 paid holidays and flexible PTO for salaried employees
- Medical, dental, and vision coverage for full-time employees and families
- HSA contributions for employees on a High Deductible Health Plan
- Paid parental leave and family-forming benefits
- 401(k) matching
- Personal device allowance
- Flexible Spending Accounts and commuter benefits
- Monthly lifestyle wallet contributions for fitness, professional development, coworking, and more
- Mental health therapy and coaching support
- Paid sabbatical leave after five years of employment
- Competitive compensation and equity grants for full-time employees
Tech Stack
Categories
About Abridge
Abridge builds an AI platform that converts patient–clinician conversations into EHR-ready clinical documentation for hospitals and clinicians. The enterprise SaaS includes automatic speech recognition and clinical note generation validated across 28+ languages, and integrates with major EHR systems. Founded in 2018 and headquartered in San Francisco, the privately held company sells to U.S. health systems, hospitals, and clinics.