Senior Security Engineer

About the role

The Trust team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house security engineering efforts. In this role, you will be expected to build, extend, and connect critical Headway systems to our security event infrastructure. You will also partner closely with members of Security, IT, and other Headway engineering teams to ensure that our complete production and corporate environments have security telemetry coverage and anomalous event detection.

What you’ll do at Headway:

• Build foundational detection and response infrastructure: build the services and tooling that will enable proactive security risk and anomaly detections
• Develop and improve automated detections: prioritize security event infrastructure and detections processes to enable react in real-time
• Enable analysis of security events from all sources (e.g. cloud infrastructure, SaaS IdP, logs) and identify gaps in coverage: prioritize the highest value signals and potential tradeoffs in priorities of both production and corporate services
• Partner with Trust and Engineering teams to identify risk signals -  Collaborate with Trust and Engineering teams to recognize and flag potential risk signals during all stages of Headway event’s lifecycle.
• Assist in ongoing security operations: You will be part of the security and privacy team and have responsibilities to assist in incident response, vulnerability management, penetration testing, security reviews, and other operational tasks to ensure that our security program is operating at a world-class level.

Tools we use:

• Languages: Python 3, TypeScript
• Libraries: FastAPI, SQLAlchemy, React/Remix, Celery
• Datastores: PostgreSQL, Snowflake
• Infrastructure: AWS (Fargate, ECS, S3, and more), Kafka
• Monitoring: Datadog, PagerDuty
• Version Control: Github
• Vulnerability Management: Snyk, Semgrep
• Detections: Crowdstrike, Expel

You’ll be great for this role if you have:

• Have 0 → 1 security experience: You have 5+ years experience in security and/or software engineering roles on startup or growth stage teams with a demonstrated history of working on detections & response security-related projects.
• Strong technical depth and breadth: You have technical experience with building secure platforms and products at a deep level. You want to understand security systems and improve their efficiency and scalability. 
• Strong cross-functional experience: You love partnering with other teams to help both teams achieve their goals.
• Thrive in ambiguity: You love tackling ambiguous problems in a fast-paced environment with an optimistic and energizing attitude.
• Innovation at Scale: You seek opportunities to lead the industry in implementing the latest security and privacy technologies.
• Results driven: You care deeply about creating impact and driving results for Headway’s business.
• Mission driven: You are motivated by Headway’s mission, increasing access to high quality mental health care.

Our interview process

After you apply to Headway, here are some details of what to expect during the interview process.

• Initial screen: You’ll connect with someone in recruiting so you can learn more about the team, Headway’s mission and exciting growth, and we can get a better idea of your background. 
• First round: You'll meet with the hiring manager to hear more about the role and team, and further illustrate the depth of your experience as it relates to the requirements of this specific role.
• Final rounds: You’ll meet several more team members for technical and non-technical interviews, including our CISO, and leave with a fuller picture of what it’s like to work at Headway.
• References and the Offer: Our favorite part of the process! We'll send over all of the details, including specifics on employee equity, and congratulatory messages from excited future team members!

Compensation and Benefits:

• The starting salary for a Senior Security Engineer is $198,000 and increases to $267,950 based on industry tenure and experience.

Benefits offered include:

• Equity Compensation
• Medical, Dental, and Vision coverage
• HSA / FSA
• 401K
• Work-from-Home Stipend
• Therapy Reimbursement
• 16-week parental leave for eligible employees
• Carrot Fertility annual reimbursement and membership
• 13 paid holidays each year as well as a Holiday Break during the week between December 25th and December 31st
• Flexible PTO
• Employee Assistance Program (EAP)
• Training and professional development

#LI-AC1