Security Engineer (Product)
As an early member of Headway's Security team, this product security engineer partners with product and engineering on secure design, code reviews, and vulnerability auditing, builds agentic/AI-native security tooling and developer guardrails, and assists with security operations like incident response and penetration testing. The stack includes Python, TypeScript, AWS, Postgres, and tools like Sn
- Compensation
- $182.8K–$215K / yr
- Location
- Remote
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 2+ years experience in security and/or software engineering roles with a history of security-related projects or responsibilities as a security generalist
- Strong cross-functional experience partnering with other teams to achieve shared goals
- Technical depth and breadth building secure platforms and products, including security design and code reviews
- Excited by AI's potential to reshape how product security works
- Thrives in ambiguity in a fast-paced environment with an optimistic attitude
- Seeks opportunities to lead the industry in implementing latest security and privacy technologies
- Results driven and motivated by Headway's mission of increasing access to mental health care
Full description
1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that.
But we're going further. Over 90,000 providers across all 50 states run their practice on our software, serving over 2.6 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale, and building much of it with AI. We aren't just a billing layer; we are becoming the platform where care actually happens.
We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.
About the role
The Security team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house product and application security engineering efforts. In this role, you will partner closely with our product and engineering teams to ensure that our application is designed and developed securely so that we can maintain and grow customers’ trust in Headway.
What you’ll do at Headway:
- Partner with Product and Engineering: Headway has many new product launches on the horizon that will transform the industry and have a rich data component. You will be a partner at both the design and development stage to ensure that we implement new features securely, including (but not limited to):
- Participating in the implementation efforts
- Doing security reviews
- Helping with product design decisions
- Auditing and surfacing vulnerabilities in our current products
- Build agentic security tooling: Move beyond rules-based automation to agentic workflows that address potential code problems at scale across our rapidly growing codebase. You'll help build an AI-native product security at Headway.
- Make the safe way, the easy way: Work on defining and building application guardrails so that developers can build securely by default. You also will work to instill a culture of secure development across engineering.