Who We AreHealthcare needs a better rhythm: one that keeps care continuous and deeply human. Heidi is building an AI Care Partner that works alongside clinicians to make that possible.We’re a team of doctors, engineers, designers, researchers, and creatives building tools that help clinicians stay focused on what matters most: their patients.In just 18 months, Heidi has given back more than 18 million hours to healthcare professionals — supporting 73 million patient visits in 116 countries. Today, more than two million patient visits each week are powered by Heidi worldwide.Backed by nearly $100 million in funding, we’re growing in the US, UK, Canada, and Europe, partnering with leading health systems including the NHS, Beth Israel Lahey Health, and Monash Health.What you’ll doBuild and maintain high-signal detections across cloud, infrastructure, and application layersImprove logging and audit coverage: what we collect, how we normalise it, how long we retain it, and how we query itDevelop response automation: playbooks, orchestration, and repeatable containment and remediation stepsImprove investigative workflows for incidents: evidence handling, timelines, and actionable learningsPartner with platform and application teams to add the right security telemetry and abuse signalsRun threat hunting cycles that generate concrete improvements to detections and controlsContribute to the wider security program by closing the loop between incidents, threat models, detection coverage, and preventative controlsWhat we’re looking forWe're looking for senior/staff-level capability, expressed as autonomy, depth, and ability to scale impact.Owns detection and response outcomes end-to-end, including prioritisation and roadmap decisionsStrong domain understanding of attacker behaviour, audit logging, and detection trade-offs (coverage vs noise)Comfortable building systems and workflows that scale (detection-as-code, automation, reliable operations)Can work independently during incidents, coordinate across teams, and drive follow-up improvementsClear communicator who can translate technical findings into priorities and preventative workOur Approach to SecurityWe build security into how we work through automation, practical controls, and clear communication. We aim for secure defaults and guardrails that help teams make good choices without unnecessary friction.Note on RequirementsWe care more about skills, approach, and ability to learn than specific certifications or industry background. If you have strong security domain knowledge and the specialised skills for this role, we'd love to hear from you.The way we work1. Build to LastWe design for safety and reliability so clinicians, patients, and our teams can trust what we build every day.2. Own Your PracticeIdeas rise on merit, not title, and everyone shares responsibility for the standards we set together.3. Move Fast, Stay SteadyWe move quickly but never at the cost of trust. Progress only matters if people can depend on what we make.4. Make Others BetterHonest feedback, steady support, and shared growth keep our teams improving together.Why you will flourish with usFlexible hybrid working environment, with 3 days in the office.A generous personal development budget of $500 per annumLearn from some of the best engineers and creatives, joining a diverse teamBecome an owner, with shares (equity) in the company, if Heidi wins, we all winThe rare chance to create a global impact as you immerse yourself in one of Australia’s leading healthtech startupsIf you have an impact quickly, the opportunity to fast track your startup career!Heidi is dedicated to creating an equitable, inclusive, and supportive work environment that brings people together from diverse backgrounds, experiences, and perspectives. Our strength is in our differences. We're proud to be an equal opportunity employer and welcome all applicants as we're committed to promoting a culture of opportunity for all.