Director of Product Security, Abridge
$306-360k
+ Equity
3 days a week in office
Powering deeper understanding in healthcare through purpose-built AI
Be an early applicant
Powering deeper understanding in healthcare through purpose-built AI
101-200 employees
Be an early applicant
$306-360k
+ Equity
3 days a week in office
101-200 employees
Company mission
To power a deeper understanding in healthcare.
Role
Who you are
- Experience: 10+ years of progressive experience in security, with a minimum of 10 years leading security teams, programs, or large-scale initiatives in a senior leadership capacity
- Business Acumen: Demonstrated experience running security as a business unit, including budget management, strategic forecasting, and translating technical risk into business impact (ROI)
- Engineering Proficiency: Must be proficient, at an engineering level, in at least one or more general-purpose programming languages. Experience with Python and/or NextJS is a significant plus
- Cloud Expertise: Deep technical expertise in securing at least one major cloud platform (GCP, AWS, or Azure) and demonstrable experience with modern cloud security principles and tools
- Containerization: Mandatory expertise in securing container orchestration technologies, specifically Kubernetes
- Industry Knowledge: Proven experience securing products (enterprise SaaS, cloud environments) handling highly sensitive data, such as Protected Health Information (PHI), with specific knowledge of NIST 800-53 / 800-171, FedRAMP, HIPAA, NIS2 and other relevant security and privacy regulations and frameworks
- Communication: Exceptional communication and presentation skills, with the ability to convey complex security issues and technical risks to both technical and non-technical audiences, including executives, customers, government agencies, and board members
What the job involves
- The Director of Product Security will be responsible for defining and driving the overall Product Security strategy, focusing on security assurance, proactive risk reduction, secure AI innovation, and maintaining a world-class security posture across all product offerings and our multi-cloud infrastructure
- You will lead and scale high-impact programs, manage teams of talented security professionals, and serve as a strategic partner to the CISO and executive leadership
- You will report directly to the Chief Information Security Officer (CISO)
- Product Security Strategy: Define and continuously evolve the long-term Product Security strategy, ensuring alignment with Abridge.ai's business goals and technological advancements
- Security Roadmap Ownership: Own the creation and execution of the Product Security roadmap, including security features, SDLC enhancements, threat modeling initiatives, and overall risk reduction milestones
- Financial Oversight: Manage the Product Security budget, including forecasting security tool expenditures, vendor contracts, and personnel resource allocation
- Metric-Driven Management: Define, track, and report on key performance indicators (KPIs) and security metrics to measure the effectiveness of all security programs and provide data-driven insights to leadership
- Impact Analysis: Conduct regular impact analysis (ROI) of security investments and lead time/cost-reduction efforts. Translate complex security risks into clear business risk terms to justify strategic initiatives
- Lead and Mentor: Serve as a motivating people leader for a growing team of Security Engineers and Analysts, providing career development, mentorship, and regular performance feedback
- Strategy and Scaling: Define and execute on goals in a hypergrowth AI company, focusing on enabling secure AI development and deployment globally
- Security Industry Engagement: Actively participate in and be a thought leader for the security industry by giving talks at conferences, publishing papers, hosting forums, etc
- Multi-Cloud Strategy: Define the security architecture and strategy for our cloud environments (GCP, AWS, Azure, etc.)
- Containerization Security: Lead the implementation of security controls for containerized applications, with a deep focus on securing Kubernetes clusters, including network policies and secrets management
- IaC Security: Implement security guardrails within Infrastructure as Code (e.g., Terraform) to ensure all cloud resources are provisioned securely
- Integrate Security: Partner with Engineering and Product leadership to embed security processes into the Software Development Lifecycle (SDLC)
- Security Practices: Develop and oversee secure coding practices, security architecture reviews, and static/dynamic code analysis practices across all applications
- Vulnerability Management: Direct the vulnerability management and penetration testing programs, ensuring comprehensive coverage and rapid, prioritized remediation of findings
- Data Protection: Lead the data security program, focusing on the protection, encryption, and access controls for highly sensitive patient data (PII, PHI, AI models, etc.)
- AI/ML Security: Establish security engineering practices for our AI/ML models and pipeline, including model integrity, adversarial attack prevention, model red-teaming, securing agentic AI, etc
Application process
- Abridge explicitly forbids candidates from using AI tools during live interviews, including teleprompter-style AI tools, chatbots, or coding assistants
- While AI is prohibited during the interview process, candidates are encouraged to discuss their experience using AI applications to achieve efficiencies in projects or their work
Our take
Summarising key elements of healthcare conversations is crucial for both physicians and patients. Medical scribes, though effective, are costly, and the healthcare system faces funding and staffing crises. This has created a demand for more efficient notetaking solutions.
This is where Abridge comes in; it has developed a HIPAA-compliant AI platform that transcribes, structures, summarises, and provides insights from audio or transcripts of medical conversations. It claims to work across all specialities and offers patient-friendly summaries in easy-to-understand language.
Abridge aims to alleviate pressure on the healthcare system from the patient's perspective, a unique approach among healthtech startups. While companies like Inovia, DOUB, and DeepScribe focus on assisting physicians with medical transcription AI, they lack Abridge's patient-centric features, which are valuable in enhancing the patient experience. Its unique focus, then, is part of the reason why it enjoyed two impressive rounds of funding in 2025 alone.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
May 2025
$300m
SERIES E
Feb 2025
$250m
SERIES D
Total funding: $757.5m
Company benefits
- Unlimited PTO, plus 12 national holidays
- 16 weeks paid parental leave, for all employees
- Flexible working hours — we care more about what you accomplish than what specific hours you’re working
- Remote work environment
- Equity for all new employees
- Generous equipment budget for your home office setup ($1600)
- Opportunity to work and grow with talented individuals, and have ownership and impact at a high growth startup
Company HQ
SoMa, San Francisco, CA
Leadership
Shivdev Rao
(CEO)Alongside their work as a practising Cardiologist at the University of Pittsburgh Medical Center, they also served as Physician Advisor in Residence and ultimately EVP at UPMC Enterprises; co-founded DocDok; and worked as a co-architect on a healthcare project at the Kauffman Foundation.
Sandeep Konam
(CTO)Completed an MS in Robotics at Carnegie Mellon, then served as Senior Product Manager at UPMC Enterprises. Has delivered guest lectures at Carnegie Mellon, Stanford, and the University of Pittsburgh.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 37 more jobs at Abridge