← All roles

Staff Product Security Engineer

Ambience Healthcare· Engineering
Apply on company site
San Francisco$226k - $283k + equityFull-timePosted 8mo ago

About the role

Senior technical role focused on designing, building, and operating secure products within Ambience Healthcare’s AWS environment, partnering with engineering from design through verification, with a hybrid working model in San Francisco.

Responsibilities

  • Secure design for high-risk changes — Guide initiatives from design proposals and architecture decisions through implementation and verification. Define threat models and security requirements, review sensitive implementation paths, and contribute prototypes, automation, or PRs when needed.
  • A credible, risk-based security backlog — Own findings from product reviews, bug bounty, penetration tests, audits, cloud tooling, and hands-on testing. Validate impact, recommend practical mitigations, and drive material issues to verified resolution or explicit risk acceptance.
  • Security engineering that scales — Expand coverage through guidance, developer enablement, automation, and well-operated tooling. Own tools across integration, tuning, triage, maintenance, and measurement—and improve or retire those that aren’t reducing risk.
  • Cloud risk reduction through our AWS migration — Partner with Platform and Infrastructure Engineering to reduce risk across IAM, network segmentation, workload isolation, secrets, logging, and configuration. Apply strong security fundamentals while building deeper AWS expertise, operationalizing our CNAPP, and establishing practical guardrails.
  • Security across the environment — Reduce risk across production, development, software delivery, enterprise AI, and internal systems. Help scope and remediate incidents, then turn lessons learned into durable improvements and secure paved paths.

Qualifications

  • Staff-level product security judgment. 8+ years of experience with depth to operate independently across complex product security challenges and extend into adjacent areas such as cloud security.
  • Engineering roots. Shipped production code and are strong in at least one backend or automation language such as Go, Python, Java, or TypeScript.
  • Product security depth. Understanding of authentication/authorization (OAuth, OIDC, SAML, JWT, RBAC, ReBAC), API security, threat modeling, secure code review, vulnerability testing, and multi-tenant SaaS handling sensitive data.
  • Cloud security fluency or aptitude. Working knowledge of IAM, network architecture, workload isolation, secrets, logging, or ability to rapidly develop that expertise.
  • Offensive validation instincts. Ability to reproduce vulnerabilities, conduct targeted dynamic testing, build PoCs, and distinguish exploitable risk from theoretical concern.
  • Demonstrated influence. Helped engineering teams understand, prioritize, remediate, and verify material security risks.
  • Tooling ownership. Ownership of security tooling or automation beyond deployment (integration, tuning, triage, maintenance, evaluation).
  • AI-augmented security engineering. Use AI as a multiplier while validating outputs against first principles and remaining accountable for decisions.
  • Based in the Bay Area and able to work from the San Francisco office three days per week.

Skills

Required:Threat modelingSecure code reviewOAuth / OIDC / SAML / JWTRBAC / ReBACCloud security (IAM, network, workload isolation, secrets, logging)

Benefits

  • Comprehensive medical, dental, and vision coverage for you and your dependents
  • 401(k) with a company match of up to 3% of base salary
  • Remote-friendly culture (with a San Francisco HQ) and full equipment provisioning
  • Parental leave
  • Annual company-wide off-sites, team off-sites and regular team lunches and all-hands gatherings, with travel, lodging and meals covered
  • Flexible time off with no annual cap, company-wide holidays and an annual holiday shutdown from December 24–January 1
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Ambience Healthcare

The AI Platform Clinicians Choose for Documentation and Coding

The AI Platform Clinicians Choose for Documentation and Coding

AI PlatformDocumentationCodingHealthcareHealth System
Company profileWebsite

More open roles at Ambience Healthcare