Staff Infrastructure Security Engineer

WHO WE ARE

Healthcare needs a better rhythm: one that keeps care continuous and deeply human. Heidi is building an AI Care Partner that works alongside clinicians to make that possible.

We’re a team of doctors, engineers, designers, researchers, and creatives building tools that help clinicians stay focused on what matters most: their patients.

In just 18 months, Heidi has given back more than 18 million hours to healthcare professionals — supporting 73 million patient visits in 116 countries. Today, more than two million patient visits each week are powered by Heidi worldwide.

Backed by nearly $100 million in funding, we’re growing in the US, UK, Canada, and Europe, partnering with leading health systems including the NHS, Beth Israel Lahey Health, and Monash Health.

About the Role

We're building security systems for medical technology that handles sensitive data and supports critical healthcare decisions. Security and data protection are core to what we build.

In this role you'll work across cloud and platform foundations to make secure-by-default infrastructure the easiest path for engineers.

WHAT YOU’LL DO

- Design and implement identity, network, and platform controls that reduce risk while keeping delivery fast

- Build scalable security guardrails for infrastructure changes through infrastructure-as-code and delivery pipelines (policy checks, safe defaults, automated verification)

- Improve service-to-service security patterns (workload identity, service authentication, secrets usage) in partnership with platform and application teams

- Strengthen data and storage controls (encryption, key management, backup and recovery security, database hardening)

- Reduce infrastructure attack vectors through hardening, configuration baselines, and continuous posture assessment

- Improve supply chain integrity for infrastructure artefacts (build provenance, dependency and image integrity, SBOMs)

- Contribute to the wider security program by turnin...