Senior/Staff Enterprise Security Engineer

Join Abridge, a high-growth startup at the forefront of AI in healthcare. As a Senior/Staff Enterprise Security Engineer, you will be a key technical contributor, implementing and operating enterprise security controls that protect identities, endpoints, SaaS applications, and corporate infrastructure. You will work cross-functionally with IT, Security, Legal, Compliance, and People teams to engineer scalable security solutions. This is a greenfield opportunity to architect the future of Enterprise Security at Abridge.

• Implement and operate enterprise security controls, including identity and access management, endpoint protection, and corporate security architecture.
• Collaborate cross-functionally with IT, Security, Legal, Compliance, and People teams to engineer scalable security solutions.
• Architect and drive the implementation of security programs for SaaS security posture management, shadow IT discovery, and third-party risk assessment.
• Want to work on building out security from the ground up at the leading edge of AI in healthcare globally? We’re looking for an experienced and highly motivated Senior Enterprise Security Engineer to join our team as one of the first engineers on the Abridge Security team
• This position requires deep hands-on expertise in identity and access management, endpoint protection, and corporate security architecture, paired with a builder’s mindset and excellent communication skills to influence security culture across the organization
• You will thrive here if you are passionate about building 0 → 1 and believe that enterprise security should reduce risk while empowering employees to do their best work
• Depth of Experience: 7+ years in enterprise security, identity security, corporate security, or adjacent security engineering domains, with a demonstrated track record of hands-on implementation and operational ownership
• Communication Skills: Strong communicator who can translate technical security topics into clear terms for audiences ranging from engineers to executive leadership
• Identity and Access Expertise: Strong hands-on depth in identity and access management, including SSO, OAuth/OIDC, SCIM, authentication protocols, access lifecycle management, and identity governance. You understand how to design and operate Zero Trust architectures in modern enterprise environments
• Cloud and SaaS Fluency: Deep familiarity with securing cloud-native environments (GCP or AWS) and managing the security posture of a large, evolving SaaS estate. You understand the identity-centric nature of modern enterprise risk
• Engineering Mindset: Strong scripting and automation skills (Python, Go, or similar). You write clean, maintainable code and believe that manual processes are technical debt. Experience with infrastructure-as-code is a plus
• Endpoint Security Proficiency: Experience designing and operating endpoint security programs at scale, including EDR, MDM, device compliance, and fleet management across macOS, Windows, and Linux
• Cross-Functional Influence: Demonstrated ability to partner with IT, HR, Legal, and Compliance to deliver security outcomes through influence, not mandates. You build tools and processes people actually enjoy using
• Pragmatic Execution: You have a bias for action and a knack for navigating ambiguity. You understand how to weigh security risks against business velocity, choosing solutions that empower employees while maintaining a strong security posture
• You have worked in a regulated industry such as healthcare, fintech, or life sciences and understand frameworks like HIPAA, SOC 2, or HITRUST
• You have experience building or scaling an enterprise security function from 0 → 1 at a high-growth startup
• You have experience applying Generative AI to enterprise security operations—whether for automating access reviews, triaging alerts, or scaling security awareness
• You are energized by enabling a fast-growing business to move quickly and securely, treating security as a platform service rather than a gate
• You participate in the security community via talks, papers, blogs, or open-source contributions