The ad says“Cloud and SaaS Fluency: Deep familiarity with securing cloud-native environments (GCP or AWS) and managing the security posture of a large, evolving SaaS estate. You understand the identity-centric nature of modern enterprise risk”
The ad says“Secure the Endpoint Fleet: Engineer and operate endpoint detection and response (EDR), device management (MDM), and endpoint compliance tooling, ensuring every device connecting to Abridge systems meets security standards across macOS, Windows, and Linux”
The ad says“Cloud and SaaS Fluency: Deep familiarity with securing cloud-native environments (GCP or AWS) and managing the security posture of a large, evolving SaaS estate. You understand the identity-centric nature of modern enterprise risk”
The ad says“You have experience applying Generative AI to enterprise security operations—whether for automating access reviews, triaging alerts, or scaling security awareness”
The ad says“Engineering Mindset: Strong scripting and automation skills (Python, Go, or similar). You write clean, maintainable code and believe that manual processes are technical debt. Experience with infrastructure-as-code is a plus”
The ad says“You have worked in a regulated industry such as healthcare, fintech, or life sciences and understand frameworks like HIPAA, SOC 2, or HITRUST”
The ad says“You have worked in a regulated industry such as healthcare, fintech, or life sciences and understand frameworks like HIPAA, SOC 2, or HITRUST”
The ad says“Implement and Operate Identity and Access Management: Design, deploy, and manage IAM and Zero Trust access controls—including SSO, MFA, authentication protocols, access lifecycle management, and identity governance—across cloud and SaaS environments. Ensure every identity is accounted for and every access decision is defensible”
The ad says“Secure the Endpoint Fleet: Engineer and operate endpoint detection and response (EDR), device management (MDM), and endpoint compliance tooling, ensuring every device connecting to Abridge systems meets security standards across macOS, Windows, and Linux”
The ad says“Secure the Endpoint Fleet: Engineer and operate endpoint detection and response (EDR), device management (MDM), and endpoint compliance tooling, ensuring every device connecting to Abridge systems meets security standards across macOS, Windows, and Linux”
The ad says“Secure the Endpoint Fleet: Engineer and operate endpoint detection and response (EDR), device management (MDM), and endpoint compliance tooling, ensuring every device connecting to Abridge systems meets security standards across macOS, Windows, and Linux”
The ad says“Implement and Operate Identity and Access Management: Design, deploy, and manage IAM and Zero Trust access controls—including SSO, MFA, authentication protocols, access lifecycle management, and identity governance—across cloud and SaaS environments. Ensure every identity is accounted for and every access decision is defensible”
The ad says“Identity and Access Expertise: Strong hands-on depth in identity and access management, including SSO, OAuth/OIDC, SCIM, authentication protocols, access lifecycle management, and identity governance. You understand how to design and operate Zero Trust architectures in modern enterprise environments”
The ad says“Engineering Mindset: Strong scripting and automation skills (Python, Go, or similar). You write clean, maintainable code and believe that manual processes are technical debt. Experience with infrastructure-as-code is a plus”
The ad says“Drive SaaS and Third-Party Security: Build and operate programs for SaaS security posture management, shadow IT discovery, and third-party risk assessment to maintain control as the SaaS footprint grows”
The ad says“Identity and Access Expertise: Strong hands-on depth in identity and access management, including SSO, OAuth/OIDC, SCIM, authentication protocols, access lifecycle management, and identity governance. You understand how to design and operate Zero Trust architectures in modern enterprise environments”
The ad says“You have worked in a regulated industry such as healthcare, fintech, or life sciences and understand frameworks like HIPAA, SOC 2, or HITRUST”
The ad says“Implement and Operate Identity and Access Management: Design, deploy, and manage IAM and Zero Trust access controls—including SSO, MFA, authentication protocols, access lifecycle management, and identity governance—across cloud and SaaS environments. Ensure every identity is accounted for and every access decision is defensible”
The ad says“Engineer Corporate Network Security: Design and maintain secure corporate network architectures, including VPN, ZTNA, network segmentation, and Wi-Fi security, ensuring robust protection for both on-premises and remote work environments”
The ad says“Secure the Endpoint Fleet: Engineer and operate endpoint detection and response (EDR), device management (MDM), and endpoint compliance tooling, ensuring every device connecting to Abridge systems meets security standards across macOS, Windows, and Linux”
The ad says“Implement and Operate Identity and Access Management: Design, deploy, and manage IAM and Zero Trust access controls—including SSO, MFA, authentication protocols, access lifecycle management, and identity governance—across cloud and SaaS environments. Ensure every identity is accounted for and every access decision is defensible”
The ad says“Engineer Corporate Network Security: Design and maintain secure corporate network architectures, including VPN, ZTNA, network segmentation, and Wi-Fi security, ensuring robust protection for both on-premises and remote work environments”
Values
The ad says“Engineering Mindset: Strong scripting and automation skills (Python, Go, or similar). You write clean, maintainable code and believe that manual processes are technical debt. Experience with infrastructure-as-code is a plus”
In this role, you’ll be a key technical contributor, implementing and operating the enterprise security controls that protect the identities, endpoints, SaaS applications, and corporate infrastructure our employees rely on every day
You’ll work cross-functionally with IT, Security, Legal, Compliance, and People teams to engineer security solutions that scale alongside rapid growth
This is a greenfield opportunity to architect the way forward for Enterprise Security at Abridge
Implement and Operate Identity and Access Management: Design, deploy, and manage IAM and Zero Trust access controls—including SSO, MFA, authentication protocols, access lifecycle management, and identity governance—across cloud and SaaS environments. Ensure every identity is accounted for and every access decision is defensible
Secure the Endpoint Fleet: Engineer and operate endpoint detection and response (EDR), device management (MDM), and endpoint compliance tooling, ensuring every device connecting to Abridge systems meets security standards across macOS, Windows, and Linux
Drive SaaS and Third-Party Security: Build and operate programs for SaaS security posture management, shadow IT discovery, and third-party risk assessment to maintain control as the SaaS footprint grows
Automate and Scale: Build production-grade automation for access reviews, onboarding/offboarding workflows, policy enforcement, and security operations—turning manual processes into reliable, code-driven systems
Engineer Corporate Network Security: Design and maintain secure corporate network architectures, including VPN, ZTNA, network segmentation, and Wi-Fi security, ensuring robust protection for both on-premises and remote work environments
Support Enterprise AI Security: Help implement Abridge’s strategy for securing corporate AI adoption—from enforcing governance frameworks and sanctioned tool inventories to deploying technical controls around data loss prevention and third-party AI vendor risk
Partner Cross-Functionally: Collaborate with IT, People, Legal, and Compliance teams to translate regulatory and business requirements into durable, automated technical controls that don’t slow down the organization
Benefits
Flexible working hours — we care more about what you accomplish than what specific hours you’re working
Remote work environment
Unlimited PTO, plus 12 national holidays
Equity for all new employees
16 weeks paid parental leave, for all employees
Generous equipment budget for your home office setup ($1600)
Opportunity to work and grow with talented individuals, and have ownership and impact at a high growth startup
Preferred experience
Want to work on building out security from the ground up at the leading edge of AI in healthcare globally? We’re looking for an experienced and highly motivated Senior Enterprise Security Engineer to join our team as one of the first engineers on the Abridge Security team
This position requires deep hands-on expertise in identity and access management, endpoint protection, and corporate security architecture, paired with a builder’s mindset and excellent communication skills to influence security culture across the organization
You will thrive here if you are passionate about building 0 → 1 and believe that enterprise security should reduce risk while empowering employees to do their best work
Cloud and SaaS Fluency: Deep familiarity with securing cloud-native environments (GCP or AWS) and managing the security posture of a large, evolving SaaS estate. You understand the identity-centric nature of modern enterprise risk
Identity and Access Expertise: Strong hands-on depth in identity and access management, including SSO, OAuth/OIDC, SCIM, authentication protocols, access lifecycle management, and identity governance. You understand how to design and operate Zero Trust architectures in modern enterprise environments
Pragmatic Execution: You have a bias for action and a knack for navigating ambiguity. You understand how to weigh security risks against business velocity, choosing solutions that empower employees while maintaining a strong security posture
Cross-Functional Influence: Demonstrated ability to partner with IT, HR, Legal, and Compliance to deliver security outcomes through influence, not mandates. You build tools and processes people actually enjoy using
Engineering Mindset: Strong scripting and automation skills (Python, Go, or similar). You write clean, maintainable code and believe that manual processes are technical debt. Experience with infrastructure-as-code is a plus
Depth of Experience: 7+ years in enterprise security, identity security, corporate security, or adjacent security engineering domains, with a demonstrated track record of hands-on implementation and operational ownership
Endpoint Security Proficiency: Experience designing and operating endpoint security programs at scale, including EDR, MDM, device compliance, and fleet management across macOS, Windows, and Linux
Communication Skills: Strong communicator who can translate technical security topics into clear terms for audiences ranging from engineers to executive leadership
You have worked in a regulated industry such as healthcare, fintech, or life sciences and understand frameworks like HIPAA, SOC 2, or HITRUST
You have experience building or scaling an enterprise security function from 0 → 1 at a high-growth startup
You have experience applying Generative AI to enterprise security operations—whether for automating access reviews, triaging alerts, or scaling security awareness
You are energized by enabling a fast-growing business to move quickly and securely, treating security as a platform service rather than a gate
You participate in the security community via talks, papers, blogs, or open-source contributions
