Senior Application Security Engineer

Stack

Responsibilities

• ▹Lead threat modeling and design reviews from ideation to production code, covering complex systems, new products and platform initiatives
• ▹Define and implement the technical roadmap of the Application Security program with clear standards and guardrails
• ▹Mentor and enable product and engineering teams on security features, secure coding, application architecture and vulnerability remediation
• ▹Develop training materials to build security best practices across engineering
• ▹Lead in-depth manual and tool-assisted secure code reviews, including logic and authorization flaws that automated tools often miss
• ▹Get hands-on with assessing AI models, agents and architectures
• ▹Lead internal penetration testing of new products and legacy systems
• ▹Design and improve the end-to-end vulnerability management program so critical issues are identified, prioritized and fixed in a developer-friendly way
• ▹Support the security incident response team as an expert on Abridge's products and applications

Requirements

• ▹7+ years of direct experience in an Application Security role, designing and implementing security improvements at scale
• ▹Deep proficiency in one or more major programming languages and a solid background in software development principles
• ▹Extensive experience securing applications deployed in cloud environments and knowledge of containerization technologies (Kubernetes)
• ▹Expert-level knowledge of web application security, APIs, IAM (identity, authentication/authorization, RBAC, ABAC) and applied cryptography
• ▹Deep understanding of the security of AI and ML models, agents and associated systems
• ▹Excellent communication skills to influence security culture across the organization

Nice to have

• ▹Python and Next.js experience
• ▹GCP experience
• ▹Contributing to or using open-source security tools, publishing security research, managing bug bounty programs, active engagement in the security industry
• ▹Driving large cross-functional technical projects that impact security posture across the organization
• ▹Defining and using security metrics to report on AppSec program effectiveness to technical and executive audiences

Soft skills

What we offer

• ▹14 paid holidays, flexible PTO for salaried employees, accrued time off for hourly employees
• ▹Medical, dental and vision coverage for full-time employees and their families
• ▹Monthly HSA contributions with a High Deductible Health Plan
• ▹Paid parental leave
• ▹Family forming benefits
• ▹401(k) matching
• ▹Personal device allowance
• ▹Pre-tax benefits: FSA and commuter benefits
• ▹Monthly lifestyle wallet for fitness, professional development, coworking and more
• ▹Mental health support: therapy and coaching
• ▹Paid sabbatical leave after 5 years
• ▹Competitive compensation and equity

About the company

Abridge was founded in 2018 to power deeper understanding in healthcare. Its AI platform turns patient-clinician conversations into structured clinical notes in real time. The team includes practicing MDs, AI scientists and engineers, with offices in San Francisco, New York and Pittsburgh.