Senior​/Enterprise Security Engineer

Senior/Staff Enterprise Security Engineer

Join to apply for the Senior/Staff Enterprise Security Engineer role at Abridge

Base pay range
$/yr - $/yr

About Abridge
Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI‑powered platform was purpose‑built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients. Our enterprise‑grade technology transforms patient‑clinician conversations into structured clinical notes in real‑time, with deep EMR integrations. Powered by Linked Evidence and our purpose‑built, auditable AI, we are the only company that maps AI‑generated summaries to ground truth, helping providers quickly trust and verify the output.

As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems. We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care sense. We have offices located in San Francisco, New York, and Pittsburgh.

The Role
We’re looking for a very experienced and highly motivated Senior or Staff Enterprise Security Engineer to join our team as one of the first engineers on the Abridge Security team. In this role, you’ll be a key technical leader, driving large initiatives that shape our company, infrastructure, SaaS ecosystem, and business practices. You’ll impact the vision and hands‑on execution of securing our enterprise infrastructure and systems across the company.

You’ll work cross‑functionally with technical and business teams to integrate security seamlessly, automate security capabilities and controls, and mentor others to build secure‑by‑default solutions across the business.

What You’ll Do

• Identity & Access Management (IAM) and SaaS Security
  • IAM Architecture:
    Architect and implement enterprise‑wide Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions.
  • Federation & SSO:
    Own the implementation and maintenance of authentication standards, including Single Sign‑On (SSO), phishing‑resistant Multi‑Factor Authentication (MFA), and identity federation protocols (SAML, OIDC, OAuth2).
  • SaaS Security Posture:
    Design and enforce security policies for critical SaaS applications using tools like SSPM.
  • Lifecycle Management:
    Develop and automate the full identity lifecycle (joiner, mover, leaver) process, leveraging SCIM and other APIs for streamlined user provisioning and de‑provisioning.
• Security Automation and Tooling
  • Automation Strategy:
    Lead the development of the security automation roadmap for Enterprise Security, identifying key areas for efficiency gains.
  • Build & Integrate:
    Design and build custom automation scripts and integrations using languages like Python to connect security tools (SIEM, EDR, IAM, Ticketing).
  • Policy Enforcement:
    Utilize Infrastructure as Code (IaC) tools (e.g., Terraform) to manage the secure configuration of enterprise tools and enforce security policies at scale across code repos, MDM, and cloud environments.
• Endpoint, Network, and Email Security
  • Endpoint Protection:
    Engineer, deploy, and manage our Endpoint Detection and Response (EDR) and Mobile Device Management (MDM) platforms to ensure full coverage, policy compliance, and timely incident response across various operating systems (primarily macOS).
  • Network Security Controls:
    Design, configure, and maintain enterprise network security controls, including next‑generation firewalls, secure web gateways, VPNs, and micro‑segmentation strategies.
  • Email Security:
    Own and optimize the email security stack, DMARC/DKIM/SPF enforcement, and anti‑phishing controls to mitigate social engineering attacks.
  • Zero Trust Architecture:
    Drive the technical implementation of the company’s Zero Trust architecture across corporate networks, systems, and endpoints.
• Leadership and Partnership
  • Technical Leadership:
    Act as an escalation point for complex security events and technical issues within the Enterprise Security domain, performing root cause analysis and leading remediation efforts.
  • Compliance &…