Hybrid Staff Application Security Engineer

at Heidi Health

• Job title: Staff Application Security Engineer
• Job type: Full Time
• Experience level: Lead
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Distributed Systems
• Location requirements: Hybrid, Sydney, Australia

About the role

• Staff Application Security Engineer partnering with product and engineering teams for secure architecture. Building systems to handle sensitive data for healthcare providers.

Responsibilities

• Lead secure architecture work early: threat model features, define security requirements, and propose concrete architecture options
• Design and standardise secure patterns for authentication, session management, and token handling across services and client applications
• Design and review authorisation models and access control patterns (policy enforcement, fine-grained controls)
• Establish secure API architecture patterns: validation and normalisation, rate limiting, abuse resistance, and observability signals
• Build libraries, templates, and reference implementations so teams can adopt secure patterns with minimal friction
• Shape security testing and feedback loops (static and dynamic testing, dependency scanning) so they reinforce architecture choices and stay actionable
• Contribute to the wider security program by turning recurring application risks into standards, shared components, and engineering guidance

Requirements

• senior/staff-level capability, expressed as autonomy, depth, and ability to scale impact.
• Operates with high autonomy: can take an ambiguous app risk area and drive it from discovery to architecture to rollout
• Strong domain understanding of modern application architectures, distributed systems failure modes, and common security pitfalls
• Designs pragmatic security architectures that fit product constraints and delivery realities
• Builds leverage through reusable patterns, shared components, and clear standards, not just one-off reviews
• Communicates trade-offs clearly and aligns product and engineering stakeholders on decisions

Benefits

• Flexible hybrid working environment, with 3 days in the office.
• A generous personal development budget of $500 per annum
• Learn from some of the best engineers and creatives, joining a diverse team
• Become an owner, with shares (equity) in the company, if Heidi wins, we all win
• The rare chance to create a global impact as you immerse yourself in one of Australia’s leading healthtech startups
• If you have an impact quickly, the opportunity to fast track your startup career!