Senior/Staff Threat Detection Engineer

About AbridgeAbridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients.Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems.We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh. The RoleWant to work on building out security from the ground up at the leading edge of AI in healthcare globally? We're looking for an experienced and highly motivated Senior or Staff Threat Detection and Response Engineer to join our team as one of the first engineers on the Abridge Security Operations team. In this role, you'll be a key technical leader, with the ultimate goal of increasing the costs to any adversary that chooses to target us or our customers.This position requires deep technical expertise, a builder's mindset, and excellent communication skills to influence security culture across the organization. This is a greenfield opportunity to architect the way forward for Threat Detection and Response at Abridge. You will thrive here if you are passionate about building 0 → 1 and believe that modern security is, at its core, a large-scale data and automation challenge.What You’ll DoLeading investigations of complex, organization-wide security events and establishing best practices across multiple security domains (log analysis, digital forensics, malware analysis)Designing and implementing the strategic roadmap for threat detection capabilities, creating high-fidelity detection systems based on deep understanding of advanced threat actor TTPsArchitecting scalable incident response processes and driving automation across the entire IR lifecycle, establishing patterns for the organizationServing as incident commander for critical, cross-organizational security incidents and mentoring others in effective incident management practicesDriving security research initiatives, discovering novel detection mechanisms and presenting findings to internal teams, executive leadership, and external audiencesDefining build-vs-buy strategies for security tooling, leading major technical evaluations and driving organizational standards for security automationScaling the security team's capabilities and maturity through technical leadership, mentorship, establishing engineering best practices, and raising the hiring barWhat You’ll Bring9+ years in Detection Engineering, Incident Response, Advisory Emulation, Offensive Security and/or Threat IntelligenceExperience in high-growth environments where you've scaled security capabilities alongside rapid organizational expansion, managing evolving threat landscapes and increasing complexityExceptional communicator who can influence technical strategy across all organizational levels, from engineers to executive leadershipProven track record leading critical, multi-week incident response efforts and driving post-incident strategic improvementsDeep technical expertise with demonstrated ability to architect scalable security systems and drive innovation in detection capabilitiesHistory of moving forward ambiguous, organization-wide initiatives through influence, technical vision, and cross-functional collaborationExpert-level knowledge of attacker tactics, techniques, and procedures across multiple threat actor groupsSystems thinker who navigates complexity pragmatically while building toward elegant, maintainable solutionsStrong experience with cloud security architecture and building production-grade automation and toolingStrong scripting skills in multiple scripting/programming languages (Python, Go, etc.)Bonus Points If…Experience applying Generative AI to operational security problems.Participation in the Security community via talks, papers, or blogsExperience leading or managing Technical Security functions or building technical security functions from 0 → 1Experience on a code first/automation first security teamWhy Work at Abridge?At Abridge, we’re transforming healthcare delivery experiences with generative AI, enabling clinicians and patients to connect in deeper, more meaningful ways. Our mission is clear: to power deeper understanding in healthcare. We’re driving real, lasting change, with millions of medic