Senior/Staff Cloud Security Engineer, Abridge

• Experience: 7+ years of direct experience in a Cloud Security / Infrastructure Security role, with a demonstrated history of designing and implementing security improvements at scale
• Programming Fluency: Deep proficiency in one or more major programming languages (Python and/or NextJS a big plus) and a solid background in software development principles
• Infrastructure-as-Code: Direct experience with Terraform, infrastructure-as-code pipelines, and associated automation
• Cloud & Containers: Extensive experience securing cloud environments (GCP, AWS) and knowledge of containerization technologies (Kubernetes, Docker)
• Technical Depth: Expert-level knowledge of cloud and infrastructure security techniques and principles, network security, etc

Desirable

• Want to work on building out security from the ground up at the leading edge of AI in healthcare globally
• We're looking for a very experienced and highly motivated Senior or Staff Cloud Security Engineer to join our team as one of the first engineers on the Abridge Security team
• In this role, you'll be a key technical leader, driving key initiatives that shape our product, infrastructure, and engineering practices
• Impact both the vision and hands-on execution of securing our cloud infrastructure across the entire product portfolio
• You'll work cross-functionally with product and engineering teams to integrate security seamlessly, automate security capabilities and controls, and mentor others to build secure-by-default infrastructure at scale in the age of AI
• This position requires deep technical expertise, a builder's mindset, and excellent communication skills to influence security culture across the organization
• Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct threat modeling and security architecture reviews for multi-cloud complex systems, new infrastructure, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals
• Define Security Strategy: Define and implement the technical roadmap for the Cloud Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails
• Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on cloud and infrastructure security, architecture, vulnerability remediation strategies, reliability, and resilience
• Build Security Pipelines & Automation: Design, implement, and maintain advanced security automation tools and services, integrating them seamlessly into infrastructure-as-code pipelines
• Tool Management & Tuning: Own the deployment, configuration, and maintenance of CloudSec tooling, tuning scanners and custom rules to reduce false positives and maximize efficacy across various technology stacks
• Drive Proactive Security: Develop custom scripts and tooling to automate security tasks and processes, accelerate configuration monitoring and vulnerability detection, and enforce policy-as-code across the development environment
• Code and Security Reviews: Perform and lead in-depth security and code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws in infrastructure, networks, configurations, policies, etc. Get hands on with assessing infrastructure associated with AI models, agents, and architectures
• Vulnerability Program Oversight: Work across security and engineering teams, advise on the end-to-end vulnerability management program for Abridge’s products and applications, infrastructure and networks, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible
• Security Incident Response: Serve as an expert on Abridge’s cloud environments, infrastructure, and networks for the security incident response team, assisting in investigating and resolving security events and incidents