[Hiring] Security Engineer @Headway

Role Description

The Security team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house product and application security engineering efforts. In this role, you will partner closely with our product and engineering teams to ensure that our application is designed and developed securely so that we can maintain and grow customers’ trust in Headway.

What you’ll do at Headway:

• Partner with Product and Engineering:
  • Participate in the implementation efforts
  • Conduct security reviews
  • Assist with product design decisions
  • Audit and surface vulnerabilities in our current products
• Build agentic security tooling: Move beyond rules-based automation to agentic workflows that address potential code problems at scale across our rapidly growing codebase. You'll help build an AI-native product security at Headway.
• Make the safe way, the easy way: Work on defining and building application guardrails so that developers can build securely by default. Instill a culture of secure development across engineering.
• Assist in ongoing security operations: Participate in incident response, vulnerability management, penetration testing, security reviews, and other operational tasks to ensure that our security program is operating at a world-class level.

Qualifications

• Have 0 → 1 security experience: 2+ years experience in security and/or software engineering roles with a demonstrated history of working on security-related projects or with responsibilities as a security generalist.
• Strong cross-functional experience: Love partnering with other teams to help both teams achieve their goals.
• Strong technical depth and breadth: Technical experience with building secure platforms and products at a deep level. Excited to perform security design and code reviews.
• Excited by AI’s potential: Believe AI will fundamentally reshape how product security works, and want to be at the forefront of making that happen.
• Thrive in ambiguity: Love tackling ambiguous problems in a fast-paced environment with an optimistic and energizing attitude.
• Innovation at Scale: Seek opportunities to lead the industry in implementing the latest security and privacy technologies.
• Results driven: Care deeply about creating impact and driving results for Headway’s business.
• Mission driven: Motivated by Headway’s mission, increasing access to high quality mental health care.

Requirements

• Cloud Security: Lacework
• Languages: Python 3, TypeScript
• Libraries: FastAPI, SQLAlchemy, React
• Datastores: Postgres, Redis
• Infrastructure: AWS (Fargate, ECS, S3, and more), Spark and Kafka
• Monitoring: Datadog, PagerDuty
• Version Control: Github
• Vulnerability Management: Snyk, Semgrep

Company Description

1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access.

We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that.

But we're going further. Over 75,000 providers across all 50 states run their practice on our software, serving over 1 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale. We aren't just a billing layer; we are becoming the platform where care actually happens.

We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.