Director of Security Operations, Abridge
$306-360k
+ Equity
3 days a week in office
Powering deeper understanding in healthcare through purpose-built AI
Be an early applicant
Powering deeper understanding in healthcare through purpose-built AI
101-200 employees
Be an early applicant
$306-360k
+ Equity
3 days a week in office
101-200 employees
Company mission
To power a deeper understanding in healthcare.
Role
Who you are
- This role requires exceptional strategic leadership, deep technical understanding, and a commitment to operational excellence, security automation, and threat intelligence integration
- Experience: 10+ years of senior leadership experience in security, with a minimum of 7+ years specifically in Security Operations, leading security teams, programs, or large-scale initiatives with a focus on threat detection engineering and incident response for a global SaaS company
- Business Acumen: Demonstrated experience running security as a business unit, including budget management, strategic forecasting, and translating technical risk into clear business impact (ROI) for executive leadership and the board
- Technical Depth: Deep technical expertise in operating and securing enterprise environments, including hands-on familiarity with SIEM/SOAR technologies and cloud security principles (GCP, AWS, or Azure)
- Regulatory Knowledge: Proven experience operating in highly regulated industries, with strong knowledge of relevant security and privacy frameworks (e.g., NIST 800-53 / 800-171, FedRAMP, HIPAA, NIS2, etc.)
- Communication: Exceptional communication and presentation skills, with the ability to convey complex security issues and operational risks to both highly technical teams and non-technical audiences, including executives, boards, customers, and government agencies
- If you are ready to make a meaningful impact alongside passionate people who care deeply about what they do, Abridge is the place for you
What the job involves
- The Director of Security Operations is a critical leadership position responsible for defining, executing, and maturing the organization's 24/7 operational security posture
- You'll lead a multidisciplinary set of teams focused on preventing, detecting, analyzing, and responding to security threats across the entire enterprise—from corporate infrastructure to production environments
- You will report directly to the Chief Information Security Officer (CISO)
- Security Strategy: Define and continuously evolve the strategy, vision, and roadmap for the Security Operations function, ensuring alignment with overall business objectives and risk tolerance
- Financial Oversight: Manage the Security Operations budget, including forecasting expenditures for security tools, managed service providers, and personnel resource allocation
- Metric-Driven Management: Define, track, and report on key performance indicators (KPIs) and security metrics such as Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), overall program effectiveness, and operational efficiency metrics such as tracking of true positives, total security events, security investigations, and alert fidelity
- People & Program Leadership: Serve as a motivating people leader for a growing, globally-distributed team, providing career development, mentorship, and regular performance feedback
- Threat Response: Develop a team to lead and manage the 24/7 threat detection and response function, overseeing incident triage, escalation, and coordination for all security events and incidents
- Investigations and Forensics: Develop a team that takes point on technical investigations and digital forensics. Establish and maintain digital forensics capabilities and chain-of-custody procedures
- Threat Detection Engineering: Oversee the lifecycle of all detection-as-code, security alerts, rules, and logic
- Drive the development and implementation of advanced threat detection content (e.g., SIEM correlation rules, EDR signatures) based on the MITRE ATT&CK framework
- Threat Intelligence: Establish a formal Threat Intelligence program, including collection, analysis, enrichment, and dissemination of relevant threat information to inform detection and response strategies
- Security Infrastructure Engineering: Develop a team to lead and define the architecture, deployment, and optimization of core security infrastructure, including the Security Information and Event Management (SIEM) system and Security Orchestration, Automation, and Response (SOAR) platform
- Security Services Automation: Drive the development and implementation of security automation across the organization to reduce manual effort, increase operational speed, and enforce security policy compliance at scale
- Data Engineering: Oversee security data engineering efforts, focusing on building and maintaining robust data pipelines, data lakes, and lakehouses to ensure high-quality, normalized security event data is available for threat detection and forensic analysis
- Offensive Security: Own the management of the Red Team and Purple Team programs. Oversee and coordinate internal and external penetration testing engagements, translating findings into actionable remediation plans
- Enterprise Security: Develop a team to lead the security architecture, engineering, and operations of the corporate IT infrastructure, including:
- Securing the SaaS ecosystem (leveraging SSPM), defining the authentication/authorization architecture, overseeing the Third-Party Risk Management (TPRM) program (supplier / supply-chain security), Identity and Access Management (IAM), endpoint security (EDR/XDR), email security, and network security controls (network monitoring, firewalls, zero-trust components)
- Physical Security: Develop a team to lead and manage the physical security / life safety program for all corporate offices, including access control systems, video surveillance, and alarm monitoring
- Life Safety Compliance: Partner with Facilities/Real Estate and Ops teams to ensure all physical security measures align with local life safety codes and regulations
- International Travel Program: Partner with HR, Legal, and other departments to develop a travel policy and program that tracks and manages international travel, provides for security protections when appropriate, and manages risk accordingly
- Cross-Functional Leadership: Lead the overall security response during major incidents and crises, serving as the senior-most security leader in cross-functional crisis management exercises and real-world events
- Communications and Coordination: Assist in developing and leading the strategy and execution for internal communication (e.g., executive status updates) and external communication (e.g., working with PR/Legal) during high-severity security incidents
- Coordination & Information Sharing: Establish and maintain relationships for effective coordination with external entities, including regulatory bodies, law enforcement, and government to private sector information sharing groups
Application process
- Abridge explicitly forbids candidates from using AI tools during live interviews, including teleprompter-style AI tools, chatbots, or coding assistants
- While AI is prohibited during the interview process, candidates are encouraged to discuss their experience using AI applications to achieve efficiencies in projects or their work
Our take
Summarising key elements of healthcare conversations is crucial for both physicians and patients. Medical scribes, though effective, are costly, and the healthcare system faces funding and staffing crises. This has created a demand for more efficient notetaking solutions.
This is where Abridge comes in; it has developed a HIPAA-compliant AI platform that transcribes, structures, summarises, and provides insights from audio or transcripts of medical conversations. It claims to work across all specialities and offers patient-friendly summaries in easy-to-understand language.
Abridge aims to alleviate pressure on the healthcare system from the patient's perspective, a unique approach among healthtech startups. While companies like Inovia, DOUB, and DeepScribe focus on assisting physicians with medical transcription AI, they lack Abridge's patient-centric features, which are valuable in enhancing the patient experience. Its unique focus, then, is part of the reason why it enjoyed two impressive rounds of funding in 2025 alone.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
May 2025
$300m
SERIES E
Feb 2025
$250m
SERIES D
Total funding: $757.5m
Company benefits
- Unlimited PTO, plus 12 national holidays
- 16 weeks paid parental leave, for all employees
- Flexible working hours — we care more about what you accomplish than what specific hours you’re working
- Remote work environment
- Equity for all new employees
- Generous equipment budget for your home office setup ($1600)
- Opportunity to work and grow with talented individuals, and have ownership and impact at a high growth startup
Company HQ
SoMa, San Francisco, CA
Leadership
Shivdev Rao
(CEO)Alongside their work as a practising Cardiologist at the University of Pittsburgh Medical Center, they also served as Physician Advisor in Residence and ultimately EVP at UPMC Enterprises; co-founded DocDok; and worked as a co-architect on a healthcare project at the Kauffman Foundation.
Sandeep Konam
(CTO)Completed an MS in Robotics at Carnegie Mellon, then served as Senior Product Manager at UPMC Enterprises. Has delivered guest lectures at Carnegie Mellon, Stanford, and the University of Pittsburgh.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 37 more jobs at Abridge