Staff Security Engineer
$226k - $283k • San Francisco • FullTime
Posted 29d ago
About the job
Ambience is building an AI intelligence platform to improve healthcare by reducing administrative burdens for providers. Our technology assists with real-time coding-aware documentation and clinical workflow support across various healthcare settings. We are seeking a Staff Security Engineer to join our team and play a critical role in designing, building, and operating secure products. This is a senior technical position focused on product security, with an emphasis on cloud security as our AWS environment evolves. You will partner closely with engineering teams, own security analysis, define technical requirements, make risk decisions, and contribute code where it adds the most value. The ideal candidate will leverage AI to accelerate learning and extend their impact, while grounding all decisions in strong computer science and security fundamentals.
Responsibilities
- Guide secure design for high-risk changes from proposal through verification, including threat modeling and security requirements.
- Own and manage a risk-based security backlog, validating findings and driving resolutions.
- Develop security engineering practices that scale through guidance, enablement, automation, and tooling.
- Reduce cloud risk in our AWS environment, focusing on IAM, network segmentation, workload isolation, secrets, logging, and configuration.
- Enhance security across production, development, software delivery, enterprise AI, and internal systems.
- Scope and remediate incidents, translating lessons learned into durable improvements.
- Contribute code where it creates the most leverage.
Requirements
- Staff-level product security judgment, typically developed through 8+ years of experience.
- Experience shipping production code and building software or automation in languages like Go, Python, Java, or TypeScript.
- Deep understanding of authentication and authorization (OAuth, OIDC, SAML, JWT, RBAC, ReBAC), API security, threat modeling, secure code review, vulnerability testing, and multi-tenant SaaS.
- Working knowledge of cloud security concepts (IAM, network architecture, workload isolation, secrets, logging) or a demonstrated ability to quickly develop this expertise.
- Ability to reproduce vulnerabilities, conduct dynamic testing, and build proof-of-concept exploits.
- Demonstrated experience influencing engineering teams to understand, prioritize, and remediate security risks.
- Experience owning security tooling or automation beyond deployment, including integration, tuning, triage, maintenance, and evaluation.
- Experience using AI as a force multiplier for security engineering, validating its output against first principles.
- Based in the Bay Area and able to work from our San Francisco office three days per week.