Staff Security Engineer

About Us: Here at Ambience, we never set out to be just another scribe. We’re building the AI intelligence platform that restores humanity to healthcare and drives meaningful ROI for health systems across the country. Our technology helps providers focus on delivering great care by removing the administrative burden that pulls them away from patients and away from their most impactful work. Ambience delivers real-time coding-aware documentation and clinical workflow support across ambulatory, emergency and inpatient settings at the top health systems in North America. Our teams operate relentlessly with extreme ownership to build the best solutions for our health system partners. We value candor, positivity and deep thought — and we expect a lot from each other because we know the problems we’re solving truly matter. Ambience was ranked #1 for Improving the Clinician Experience in the KLAS Research Emerging Solutions Top 20 Report, recognized by Fast Company as one of the Next Big Things in Tech, named one of the best AI companies in healthcare by Inc., and selected as a LinkedIn Top Startup in 2024 and 2025. We’re backed by Oak HC/FT, Andreessen Horowitz (a16z), OpenAI Startup Fund, and Kleiner Perkins — and we’re just getting started. THE ROLE: Ambience runs real-time clinical workflows inside some of the country’s most security-sensitive health systems. Security can’t be bolted on—it must be engineered into the product. This is a senior technical role focused on how Ambience designs, builds, and operates secure products. You’ll bring deep product security expertise and a strong software engineering foundation while extending your impact into cloud security as our AWS environment evolves. You’ll partner with engineering from design through verification on high-risk changes and foundational product capabilities. You’ll own security analysis, technical requirements, risk decisions, and tooling—and contribute code wherever it creates the most leverage. You’ll design secure systems, work fluently with code, and use AI to build context quickly, accelerate learning, and extend your reach—while grounding every decision in strong computer science, security fundamentals, and technical judgment. Our engineering roles are hybrid — working onsite at our San Francisco office three days per week. WHAT YOU’LL OWN: Secure design for high-risk changes — Guide initiatives from design proposals and architecture decisions through implementation and verification. Define threat models and security requirements, review sensitive implementation paths, and contribute prototypes, automation, or PRs when needed. A credible, risk-based security backlog — Own findings from product reviews, bug bounty, penetration tests, audits, cloud tooling, and hands-on testing. Validate impact, recommend practical mitigations, and drive material issues to verified resolution or explicit risk acceptance. Security engineering that scales — Expand coverage through guidance, developer enablement, automation, and well-operated tooling. Own tools across integration, tuning, triage, maintenance, and measurement—and improve or retire those that aren’t reducing risk. Cloud risk reduction through our AWS migration — Partner with Platform and Infrastructure Engineering to reduce risk across IAM, network segmentation, workload isolation, secrets, logging, and configuration. Apply strong security fundamentals while building deeper AWS expertise, operationalizing our CNAPP, and establishing practical guardrails. Security across the environment — Reduce risk across production, development, software delivery, enterprise AI, and internal systems. Help scope and remediate incidents, then turn lessons learned into durable improvements and secure paved paths. WHO YO