Staff Application Security Engineer
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use - for any list of duties/requirements/benefits, and
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Preserve all substantive info; remove boilerplate (cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions). Include a section ONLY when posting has real, specific content for it — never emit heading followed by filler/placeholder text. Prefer few substantive sections over many thin ones.
We need to parse the posting.
Content:
- About Abridge (company description) – could be "About the role"? Actually "About Abridge" is company overview. The role description starts after "The Role". We need sections: About the role? The instruction says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have sections like About the role (maybe summarizing role description), Responsibilities (What You’ll Do), Requirements/Qualifications (What You’ll Bring), Skills (maybe part of requirements), Benefits (Why Work at Abridge? includes benefits), Pay (Compensation Range), Schedule (maybe not present). We need to include only sections with real content.
Let's extract:
About the role: The description after "The Role" includes: "Want to work on building out security from the ground up at the leading edge of AI in healthcare globally? We're looking for a very experienced and highly motivated Staff Application Security Engineer to join our team as one of the first engineers on the Abridge Security team. In this role, you'll be a key technical leader, driving key initiatives that shape our product, infrastructure, and engineering practices. Impact both the vision and hands-on execution of our secure software development lifecycle (SDLC) across the entire product portfolio. You'll work cross-functionally with product and engineering teams to integrate security seamlessly, automate security capabilities and controls, and mentor others to build secure-by-default systems at scale in the age of AI. This position requires deep technical expertise, a builder's mindset, and excellent communication skills to influence security culture across the organization."
That's substantive.
Responsibilities: "What You’ll Do" includes bullet points (though not bullet list in text but paragraphs). We can convert to - . The content includes:
- Secure Development & Architecture Leadership
- Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct advanced threat modeling and security architecture reviews for complex systems, new products, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals.
- Define Security Strategy: Define and implement the technical roadmap for the Application Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails.
- Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on security features, product defense, secure coding practices, application architecture, and vulnerability remediation strategies.
- Conduct Training & Awareness: Develop training materials for engineers to build a foundation of security best practices across the engineering organization.
- Vulnerability Management & Incident Response
- Code and Security Reviews: Perform and lead in-depth secure code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws, including logic and authorization vulnerabilities that automated tools often miss. Get hands on with assessing AI models, agents, and architectures.
- Internal Penetration Testing: Lead internal penetration testing engagements for net new products and historical systems identify security risks across our environment.
- Vulnerability Program Oversight: Design and enhance the end-to-end vulnerability management program for Abridge’s products and applications, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible.
- Security Incident Response: Serve as an expert on Abridge’s products and applications for the security incident response team, assisting in investigating and resolving security events and incidents.
We can flatten into list items.
Requirements/Qualifications: "What You’ll Bring" includes:
- Experience: 10+ years of direct experience in an Application Security role, with a demonstrated history of designing and implementing security improvements at scale.
- Programming Fluency: Deep proficiency in one or more major programming languages (Python and NextJS a big plus) and a solid background in software development principles.
- Cloud & Containers: Extensive experience securing applications deployed in Cloud environments (GCP a big plus) and knowledge of containerization technologies (Kubernetes).
- Technical Depth: Expert-level knowledge of web application security techniques and principles, APIs, IAM (including identity, authentication/authorization, RBAC, ABAC), applied cryptography, etc.
- AI Security: Deep understanding of the security of AI and ML models, agents, and associated systems.
Bonus Points If… (these are optional but still content). Could be included under Requirements or separate "Preferred Qualifications". But we can include as part of Requirements (maybe as sublist). The instruction: Prefer a few substantive sections over many thin ones. So we could combine Requirements and Qualifications into one section maybe "Requirements". Or we could have "Requirements" and "Preferred Qualifications". But we need to avoid thin sections. Bonus points could be included under Requirements as a sublist.
Skills: Could be extracted from requirements (programming fluency, cloud, etc). But we might not need separate Skills section if we incorporate into Requirements.
Benefits: "Why Work at Abridge?" includes benefits list: "How we take care of Abridgers:" then bullet list:
- Generous Time Off: 14 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees
- Comprehensive Health Plans: Medical, Dental, and Vision coverage for all full-time employees and their families.
- Generous HSA Contribution: If you choose a High Deductible Health Plan, Abridge makes monthly contributions to your HSA.
- Paid Parental Leave: Generous paid parental leave for all full-time employees.
- Family Forming Benefits: Resources and financial support to help you build your family.
- 401(k) Matching: Contribution matching to help invest in your future.
- Personal Device Allowance: Tax free funds for personal device usage.
- Pre-tax Benefits: Access to Flexible Spending Accounts (FSA) and Commuter Benefits.
- Lifestyle Wallet: Monthly contributions for fitness, professional development, coworking, and more.
- Mental Health Support: Dedicated access to therapy and coaching to help you reach your goals.
- Sabbatical Leave: Paid Sabbatical Leave after 5 years of employment.
- Compensation and Equity: Competitive compensation and equity grants for full time employees.
- ... and much more!
We need to include Benefits section with these as list items.
Pay: Compensation Range: $228K - $290K. So we can have Pay section with that.
Schedule: Not mentioned. So we should not include Schedule section.
Also we need to include About Abridge? The instruction says use headings like About the role, Responsibilities, etc. The company overview "About Abridge" could be placed under "About the role"? Or we could have a separate "About the company" but not in list. The instruction only gave examples; we can include other headings if they have substantive content. But we should avoid thin sections. The company overview is substantive. Could be placed under "About the role" or maybe a separate "About Abridge". Since they gave example "About the role", we could use that heading for role description; company overview could be a short paragraph before that but not as a heading. However we need to preserve all substantive information; we can include company overview as a
before the sections, not as a heading. That's acceptable.
We must remove boilerplate: Equal Opportunity Employer, Staying safe - Protect yourself from recruitment fraud, etc. Also remove "How we take care of Abridgers:" heading? We'll incorporate into Benefits section.
Also remove duplicated lines, application instructions (like "How to apply"? Not present). Also remove "Compensation and Equity: Competitive compensation and equity grants for full time employees. ... and much more!" We'll keep as part of Benefits.
Now produce HTML fragment:
Start with maybe a
for company overview.
Then
About the role
with paragraph(s) describing role.
Then Responsibilities
with - items.
Then
Requirements
with - items (including experience, programming fluency, cloud & containers, technical depth, AI security, bonus points).
Then
Benefits
with - items.
Then
Pay
with containing compensation range.
We should not include Schedule.
Make sure to not repeat job title.
Let's craft.
Company overview paragraph: "Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients. Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems. We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh."
Now About the role paragraph: combine the role description.
Responsibilities: list items.
We need to ensure we don't lose any detail.
Let's extract each responsibility bullet with details.
From text:
Secure Development & Architecture Leadership
- Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct advanced threat modeling and security architecture reviews for complex systems, new products, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals.
- Define Security Strategy: Define and implement the technical roadmap for the Application Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails.
- Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on security features, product defense, secure coding practices, application architecture, and vulnerability remediation strategies.
- Conduct Training & Awareness: Develop training materials for engineers to build a foundation of security best practices across the engineering organization.
Vulnerability Management & Incident Response
- Code and Security Reviews: Perform and lead in-depth secure code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws, including logic and authorization vulnerabilities that automated tools often miss. Get hands on with assessing AI models, agents, and architectures.
- Internal Penetration Testing: Lead internal penetration testing engagements for net new products and historical systems identify security risks across our environment.
- Vulnerability Program Oversight: Design and enhance the end-to-end vulnerability management program for Abridge’s products and applications, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible.
- Security Incident Response: Serve as an expert on Abridge’s products and applications for the security incident response team, assisting in investigating and resolving security events and incidents.
We'll create list items for each bullet.
Requirements:
- Experience: 10+ years of direct experience in an Application Security role, with a demonstrated history of designing and implementing security improvements at scale.
- Programming Fluency: Deep proficiency in one or more major programming languages (Python and NextJS a big plus) and a solid background in
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Preserve all substantive info; remove boilerplate (cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions). Include a section ONLY when posting has real, specific content for it — never emit heading followed by filler/placeholder text. Prefer few substantive sections over many thin ones. We need to parse the posting. Content: - About Abridge (company description) – could be "About the role"? Actually "About Abridge" is company overview. The role description starts after "The Role". We need sections: About the role? The instruction says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have sections like About the role (maybe summarizing role description), Responsibilities (What You’ll Do), Requirements/Qualifications (What You’ll Bring), Skills (maybe part of requirements), Benefits (Why Work at Abridge? includes benefits), Pay (Compensation Range), Schedule (maybe not present). We need to include only sections with real content.
Let's extract:
About the role: The description after "The Role" includes: "Want to work on building out security from the ground up at the leading edge of AI in healthcare globally? We're looking for a very experienced and highly motivated Staff Application Security Engineer to join our team as one of the first engineers on the Abridge Security team. In this role, you'll be a key technical leader, driving key initiatives that shape our product, infrastructure, and engineering practices. Impact both the vision and hands-on execution of our secure software development lifecycle (SDLC) across the entire product portfolio. You'll work cross-functionally with product and engineering teams to integrate security seamlessly, automate security capabilities and controls, and mentor others to build secure-by-default systems at scale in the age of AI. This position requires deep technical expertise, a builder's mindset, and excellent communication skills to influence security culture across the organization."
That's substantive.
Responsibilities: "What You’ll Do" includes bullet points (though not bullet list in text but paragraphs). We can convert to - . The content includes:
- Secure Development & Architecture Leadership
- Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct advanced threat modeling and security architecture reviews for complex systems, new products, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals.
- Define Security Strategy: Define and implement the technical roadmap for the Application Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails.
- Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on security features, product defense, secure coding practices, application architecture, and vulnerability remediation strategies.
- Conduct Training & Awareness: Develop training materials for engineers to build a foundation of security best practices across the engineering organization.
- Vulnerability Management & Incident Response
- Code and Security Reviews: Perform and lead in-depth secure code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws, including logic and authorization vulnerabilities that automated tools often miss. Get hands on with assessing AI models, agents, and architectures.
- Internal Penetration Testing: Lead internal penetration testing engagements for net new products and historical systems identify security risks across our environment.
- Vulnerability Program Oversight: Design and enhance the end-to-end vulnerability management program for Abridge’s products and applications, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible.
- Security Incident Response: Serve as an expert on Abridge’s products and applications for the security incident response team, assisting in investigating and resolving security events and incidents.
We can flatten into list items.
Requirements/Qualifications: "What You’ll Bring" includes:
- Experience: 10+ years of direct experience in an Application Security role, with a demonstrated history of designing and implementing security improvements at scale.
- Programming Fluency: Deep proficiency in one or more major programming languages (Python and NextJS a big plus) and a solid background in software development principles.
- Cloud & Containers: Extensive experience securing applications deployed in Cloud environments (GCP a big plus) and knowledge of containerization technologies (Kubernetes).
- Technical Depth: Expert-level knowledge of web application security techniques and principles, APIs, IAM (including identity, authentication/authorization, RBAC, ABAC), applied cryptography, etc.
- AI Security: Deep understanding of the security of AI and ML models, agents, and associated systems.
Bonus Points If… (these are optional but still content). Could be included under Requirements or separate "Preferred Qualifications". But we can include as part of Requirements (maybe as sublist). The instruction: Prefer a few substantive sections over many thin ones. So we could combine Requirements and Qualifications into one section maybe "Requirements". Or we could have "Requirements" and "Preferred Qualifications". But we need to avoid thin sections. Bonus points could be included under Requirements as a sublist.
Skills: Could be extracted from requirements (programming fluency, cloud, etc). But we might not need separate Skills section if we incorporate into Requirements.
Benefits: "Why Work at Abridge?" includes benefits list: "How we take care of Abridgers:" then bullet list:
- Generous Time Off: 14 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees
- Comprehensive Health Plans: Medical, Dental, and Vision coverage for all full-time employees and their families.
- Generous HSA Contribution: If you choose a High Deductible Health Plan, Abridge makes monthly contributions to your HSA.
- Paid Parental Leave: Generous paid parental leave for all full-time employees.
- Family Forming Benefits: Resources and financial support to help you build your family.
- 401(k) Matching: Contribution matching to help invest in your future.
- Personal Device Allowance: Tax free funds for personal device usage.
- Pre-tax Benefits: Access to Flexible Spending Accounts (FSA) and Commuter Benefits.
- Lifestyle Wallet: Monthly contributions for fitness, professional development, coworking, and more.
- Mental Health Support: Dedicated access to therapy and coaching to help you reach your goals.
- Sabbatical Leave: Paid Sabbatical Leave after 5 years of employment.
- Compensation and Equity: Competitive compensation and equity grants for full time employees.
- ... and much more!
We need to include Benefits section with these as list items.
Pay: Compensation Range: $228K - $290K. So we can have Pay section with that.
Schedule: Not mentioned. So we should not include Schedule section.
Also we need to include About Abridge? The instruction says use headings like About the role, Responsibilities, etc. The company overview "About Abridge" could be placed under "About the role"? Or we could have a separate "About the company" but not in list. The instruction only gave examples; we can include other headings if they have substantive content. But we should avoid thin sections. The company overview is substantive. Could be placed under "About the role" or maybe a separate "About Abridge". Since they gave example "About the role", we could use that heading for role description; company overview could be a short paragraph before that but not as a heading. However we need to preserve all substantive information; we can include company overview as a
before the sections, not as a heading. That's acceptable.
We must remove boilerplate: Equal Opportunity Employer, Staying safe - Protect yourself from recruitment fraud, etc. Also remove "How we take care of Abridgers:" heading? We'll incorporate into Benefits section.
Also remove duplicated lines, application instructions (like "How to apply"? Not present). Also remove "Compensation and Equity: Competitive compensation and equity grants for full time employees. ... and much more!" We'll keep as part of Benefits.
Now produce HTML fragment:
Start with maybe a
for company overview.
Then
About the role
with paragraph(s) describing role.
Then Responsibilities
with - items.
Then
Requirements
with - items (including experience, programming fluency, cloud & containers, technical depth, AI security, bonus points).
Then
Benefits
with - items.
Then
Pay
with containing compensation range.
We should not include Schedule.
Make sure to not repeat job title.
Let's craft.
Company overview paragraph: "Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients. Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems. We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh."
Now About the role paragraph: combine the role description.
Responsibilities: list items.
We need to ensure we don't lose any detail.
Let's extract each responsibility bullet with details.
From text:
Secure Development & Architecture Leadership
- Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct advanced threat modeling and security architecture reviews for complex systems, new products, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals.
- Define Security Strategy: Define and implement the technical roadmap for the Application Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails.
- Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on security features, product defense, secure coding practices, application architecture, and vulnerability remediation strategies.
- Conduct Training & Awareness: Develop training materials for engineers to build a foundation of security best practices across the engineering organization.
Vulnerability Management & Incident Response
- Code and Security Reviews: Perform and lead in-depth secure code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws, including logic and authorization vulnerabilities that automated tools often miss. Get hands on with assessing AI models, agents, and architectures.
- Internal Penetration Testing: Lead internal penetration testing engagements for net new products and historical systems identify security risks across our environment.
- Vulnerability Program Oversight: Design and enhance the end-to-end vulnerability management program for Abridge’s products and applications, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible.
- Security Incident Response: Serve as an expert on Abridge’s products and applications for the security incident response team, assisting in investigating and resolving security events and incidents.
We'll create list items for each bullet.
Requirements:
- Experience: 10+ years of direct experience in an Application Security role, with a demonstrated history of designing and implementing security improvements at scale.
- Programming Fluency: Deep proficiency in one or more major programming languages (Python and NextJS a big plus) and a solid background in
before the sections, not as a heading. That's acceptable. We must remove boilerplate: Equal Opportunity Employer, Staying safe - Protect yourself from recruitment fraud, etc. Also remove "How we take care of Abridgers:" heading? We'll incorporate into Benefits section. Also remove duplicated lines, application instructions (like "How to apply"? Not present). Also remove "Compensation and Equity: Competitive compensation and equity grants for full time employees. ... and much more!" We'll keep as part of Benefits. Now produce HTML fragment: Start with maybe a
for company overview. Then
About the role
with paragraph(s) describing role. ThenResponsibilities
with- items.
Then
Requirements
with- items (including experience, programming fluency, cloud & containers, technical depth, AI security, bonus points).
Then
Benefits
with- items.
Then
Pay
withcontaining compensation range. We should not include Schedule. Make sure to not repeat job title. Let's craft. Company overview paragraph: "Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients. Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems. We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh." Now About the role paragraph: combine the role description. Responsibilities: list items. We need to ensure we don't lose any detail. Let's extract each responsibility bullet with details. From text: Secure Development & Architecture Leadership - Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct advanced threat modeling and security architecture reviews for complex systems, new products, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals. - Define Security Strategy: Define and implement the technical roadmap for the Application Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails. - Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on security features, product defense, secure coding practices, application architecture, and vulnerability remediation strategies. - Conduct Training & Awareness: Develop training materials for engineers to build a foundation of security best practices across the engineering organization. Vulnerability Management & Incident Response - Code and Security Reviews: Perform and lead in-depth secure code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws, including logic and authorization vulnerabilities that automated tools often miss. Get hands on with assessing AI models, agents, and architectures. - Internal Penetration Testing: Lead internal penetration testing engagements for net new products and historical systems identify security risks across our environment. - Vulnerability Program Oversight: Design and enhance the end-to-end vulnerability management program for Abridge’s products and applications, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible. - Security Incident Response: Serve as an expert on Abridge’s products and applications for the security incident response team, assisting in investigating and resolving security events and incidents. We'll create list items for each bullet. Requirements: - Experience: 10+ years of direct experience in an Application Security role, with a demonstrated history of designing and implementing security improvements at scale. - Programming Fluency: Deep proficiency in one or more major programming languages (Python and NextJS a big plus) and a solid background in
- items.
Then
- items (including experience, programming fluency, cloud & containers, technical depth, AI security, bonus points).
Then