Staff Product Security Engineer

The role

This senior technical role focuses on designing, building, and operating secure products. You will partner with engineering on high-risk changes, own security analysis and tooling, and reduce cloud risk during an AWS migration.

What you will do

• Guide high-risk changes from design proposals through implementation and verification
• Define threat models and security requirements
• Review sensitive implementation paths
• Contribute prototypes, automation, or PRs
• Own a risk-based security backlog from product reviews, bug bounty, and audits
• Validate impact and recommend practical mitigations
• Expand security coverage through guidance, developer enablement, and automation
• Reduce cloud risk through AWS migration by partnering with Platform and Infrastructure Engineering
• Reduce risk across production, development, software delivery, enterprise AI, and internal systems
• Help scope and remediate incidents

Required qualifications

• 8+ years of experience
• Shipped production code
• Built meaningful software or automation recently
• Strong in at least one backend or automation language such as Go, Python, Java, or TypeScript
• Understand authentication and authorization including OAuth, OIDC, SAML, JWT, RBAC, and ReBAC
• Understand API security, threat modeling, secure code review, vulnerability testing, and multi-tenant SaaS handling sensitive data
• Working knowledge of cloud security concepts such as IAM, network architecture, workload isolation, secrets, and logging or ability to develop expertise quickly
• Can reproduce vulnerabilities, conduct targeted dynamic testing, and build proof-of-concept exploits
• Demonstrated influence helping engineering teams understand, prioritize, remediate, and verify material security risks
• Owned security tooling or automation including integration, tuning, triage, maintenance, and evaluation
• Based in the Bay Area

Nice to have

• Experience securing healthcare systems, PHI, or similarly regulated data
• Experience designing or securing relationship-based or fine-grained authorization systems
• Offensive security or red-team depth used to demonstrate impact and influence priorities
• Experience securing enterprise AI applications, AI-enabled products, or internal AI adoption
• Deep AWS security experience, including IAM, network architecture, workload isolation, configuration management, and CNAPP operations

Benefits

• Comprehensive medical, dental, and vision coverage for you and your dependents
• 401(k) with a company match of up to 3% of base salary
• Remote-friendly culture with full equipment provisioning
• Parental leave
• Annual company-wide off-sites, team off-sites and regular team lunches and all-hands gatherings with travel, lodging and meals covered
• Flexible time off with no annual cap
• Company-wide holidays
• Annual holiday shutdown from December 24–January 1

About the company

Ambience builds an AI intelligence platform that restores humanity to healthcare and drives meaningful ROI for health systems. The company provides real-time coding-aware documentation and clinical workflow support.