Senior/Staff Enterprise Security Engineer

Position Overview

At Abridge, a pioneer in generative AI for healthcare, you will join as a Senior/Staff Enterprise Security Engineer to build out security from the ground up for our enterprise-grade platform. You’ll drive large-scale technical initiatives, design secure infrastructure across our SaaS ecosystem, and work cross-functionally to integrate automated security solutions – all while supporting our mission of powering deeper understanding in healthcare.

Key Responsibilities

• Architect and implement enterprise-wide Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions including Federation, Single Sign-On (SSO), phishing-resistant Multi-Factor Authentication (MFA), and identity federation protocols.
• Design and enforce security policies for critical SaaS applications using SSPM, and develop end-to-end identity lifecycle automation leveraging SCIM and APIs.
• Lead the security automation roadmap by designing custom scripts and integrations (using Python, Terraform, etc.) to connect and manage security tools such as SIEM, EDR, and MDM.
• Engineer and manage Endpoint Detection and Response (EDR), Mobile Device Management (MDM), network security controls including firewalls, VPNs, secure web gateways, and email security measures.
• Act as a technical leader by addressing complex security events, ensuring compliance with standards (FedRAMP, SOC 2) and working closely with IT and Privacy teams to seamlessly integrate security into business practices.

Required Qualifications

• 5 to 7+ years of progressive experience in an Enterprise/Corporate Security Engineering role.
• Proven hands-on experience in developing security automation solutions using Python or similar high-level languages.
• Expert-level knowledge of IAM concepts and protocols (e.g., SAML, OAuth), with hands-on experience in platforms such as Google Workspace.
• Strong background in deploying and managing modern Endpoint Protection (EDR) and MDM solutions.
• Deep understanding of networking and security protocols (TCP/IP, DNS, TLS/SSL, VPN, Firewalls) and securing hybrid environments.
• Excellent cross-functional skills with the ability to lead complex projects, mentor team members, and communicate effectively with both technical and non-technical stakeholders.

Preferred Qualifications

• Experience with the security of AI models, agents, and associated infrastructure.
• Familiarity with Security Orchestration, Automation, and Response (SOAR) platforms (e.g., Splunk, Cortex XSOAR).
• Deep expertise with cloud security platforms, especially GCP (with AWS and Azure as a plus), and designing robust access controls (RBAC, ABAC, NACLs).
• Hands-on experience in performing penetration tests against SaaS vendors and custom applications.

Benefits & Perks

• Generous Time Off: 14 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees.
• Comprehensive Health Plans: Medical, Dental, and Vision coverage for full-time employees and their families.
• Generous HSA Contribution: Monthly contributions if you choose a High Deductible Health Plan.
• Paid Parental Leave: Generous paid parental leave for all full-time employees.
• Family Forming Benefits: Resources and financial support for building your family.
• 401(k) Matching: Contribution matching to help invest in your future.
• Personal Device Allowance: Tax free funds for personal device usage.
• Pre-tax Benefits: Access to Flexible Spending Accounts (FSA) and Commuter Benefits.
• Lifestyle Wallet: Monthly contributions for fitness, professional development, coworking, and more.
• Mental Health Support: Dedicated access to therapy and coaching to help you reach your goals.
• Sabbatical Leave: Paid Sabbatical Leave after 5 years of employment.
• Compensation and Equity: Competitive compensation and equity grants for full-time employees.
• ... and much more!