Senior Security Engineer (Product)

About the role

The Trust team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house product and application security engineering efforts. In this role, you will partner closely with our product and engineering teams to ensure that our application is designed and developed securely so that we can maintain and grow customers’ trust in Headway.

What you’ll do at Headway

• Partner with Product and Engineering: you will be a partner at both the design and development stage to ensure that we implement new features securely, including (but not limited to):
• Participating in the implementation efforts
• Doing security reviews
• Helping with product design decisions
• Auditing and surfacing vulnerabilities in our current products
• Develop and improve our automated tooling: further enhance our automated tooling to scale our application security capabilities and find potential code problems both before and after we deploy.
• Make the safe way, the easy way: define and build application guardrails so developers can build securely by default and instill a culture of secure development across engineering.
• Assist in ongoing security operations: participate in incident response, vulnerability management, penetration testing, security reviews, and other operational tasks to ensure our security program operates at a world-class level.

Tools we use

• Languages: Python 3, TypeScript
• Libraries: FastAPI, SQLAlchemy, React
• Infrastructure: AWS (Fargate, ECS, S3, and more), Spark and Kafka
• Version Control: Github
• Vulnerability Management: Snyk, Semgrep

You’ll be great for this role if you have

• Have 0 → 1 security experience: You have 5+ years experience in security and/or software engineering roles with a demonstrated history of working on security-related projects or with responsibilities as a security generalist.
• Strong cross-functional experience: You love partnering with other teams to help both teams achieve their goals.
• Strong technical depth and breadth: You have technical experience with building secure platforms and products at a deep level. You are excited to perform security design and code reviews. You want to understand security systems and improve their efficiency and scalability.
• Thrive in ambiguity: You love tackling ambiguous problems in a fast-paced environment with an optimistic and energizing attitude.
• Innovation at Scale: You seek opportunities to lead the industry in implementing the latest security and privacy technologies.
• Results driven: You care deeply about creating impact and driving results for Headway’s business.
• Mission driven: You are motivated by Headway’s mission, increasing access to high quality mental health care.

The interview process and compensation details are provided during the application process and may include discussions of responsibilities and qualifications relevant to the role.

Compensation and benefits

The expected base pay range for this position is $227,758 - $267,950, based on a variety of factors including qualifications, experience, and geographic location. In addition to base salary, this role may be eligible for performance-based variable compensation and an equity grant, depending on the position and level.

Benefits offered include:

• Equity compensation
• Medical, Dental, and Vision coverage
• HSA / FSA
• 401K
• Work-from-Home Stipend
• Therapy Reimbursement
• 16-week parental leave for eligible employees
• Carrot Fertility annual reimbursement and membership
• 13 paid holidays each year as well as a Holiday Break during the week between December 25th and December 31st
• Flexible PTO
• Employee Assistance Program (EAP)
• Training and professional development

We believe a team’s strength is in its people, and we cannot achieve this mission without a team that reflects the diversity of this problem – across race, ethnicity, gender, sexuality, age, national origin, religion, family status, disability, military status, and experience. Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or receive other benefits and privileges of employment, please inform the recruiter when they contact you to schedule your interview. Headway participates in E-Verify. To learn more, click here.

Headway is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.