Senior Security Engineer (Product)

• Partner with Product and Engineering on secure implementation of new features including security reviews and design decisions
• Build agentic security tooling to address code problems at scale across the codebase
• Define and build application guardrails for secure-by-default development
• Instill secure development culture across engineering teams
• Assist in incident response, vulnerability management, penetration testing, and security reviews
• Audit and surface vulnerabilities in current products

1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that.

But we're going further. Over 75,000 providers across all 50 states run their practice on our software, serving over 1 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale. We aren't just a billing layer; we are becoming the platform where care actually happens.

We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

Headway’s mission is a big one – to build a new mental health care system everyone can access. We’ve built technology that helps people find great therapists with the first software-enabled national network of providers accepting insurance.

1 in 4 people in the US have a treatable mental health condition, but the majority of providers don’t accept insurance, making therapy too expensive for most people. Headway is building a new mental healthcare system that everyone can access by making it easy for therapists to accept insurance and scale their practice.

Headway was founded in 2019. Since then, we’ve grown into a diverse, national network of over 60,000 mental healthcare providers across all 50 states who run their practice on our software and have served over 1 million patients. We’re a Series D company with over $325m in funding from a16z (Andreessen Horowitz), Accel, GV (formerly Google Ventures), Spark Capital, Thrive Capital, Forerunner Ventures and Health Care Service Corporation.

We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

ABOUT THE ROLE

The Security team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house product and application security engineering efforts. In this role, you will partner closely with our product and engineering teams to ensure that our application is designed and developed securely so that we can maintain and grow customers’ trust in Headway.

• Partner with Product and Engineering: Headway has many new product launches on the horizon that will transform the industry and have a rich data component. You will be a partner at both the design and development stage to ensure that we implement new features securely, including (but not limited to):

• Participating in the implementation efforts

• Doing security reviews

• Helping with product design decisions

• Auditing and surfacing vulnerabilities in our current products

• Build Agentic Security Tooling: Move beyond rules-based automation to agentic workflows that address potential code problems at scale across our rapidly growing codebase. You'll help define what AI-native product security looks like at Headway.

• Make the safe way, the easy way: Work on defining and building application guardrails so that developers can build securely by default. You also will work to instill a culture of secure development across engineering.

• Assist in ongoing security operations: You will be part of the security and privacy team and have responsibilities to assist in incident response, vulnerability management, penetration testing, security reviews, and other operational tasks to ensure that our security program is operating at a world-class level.

• Cloud Security: Wiz

• Languages: Python 3, TypeScript

• Libraries: FastAPI, SQLAlchemy, React

• Datastores: Postgres, Redis

• Infrastructure: AWS (Fargate, ECS, S3, and more), Spark and Kafka

• Monitoring: Datadog, PagerDuty

• Version Control: Github

• Vulnerability Management: Semgrep

• Have 0 → 1 security experience: You have 5+ years experience in security and/or software engineering roles with a demonstrated history of working on security-related projects or with responsibilities as a security generalist.

• Strong cross-functional experience: You love partnering with other teams to help both teams achieve their goals.

• Strong technical depth and breadth: You have technical experience with building secure platforms and products at a deep level. You are excited to perform security design and code reviews. You want to understand security systems and improve their efficiency and scalability.

• Excited by AI’s potential: You believe AI will fundamentally reshape how product security works, and you want to be at the forefront of making that happen.

• Thrive in ambiguity: You love tackling ambiguous problems in a fast-paced environment with an optimistic and energizing attitude.

• Innovation at Scale: You seek opportunities to lead the industry in implementing the latest security and privacy technologies.

• Results driven: You care deeply about creating impact and driving results for Headway’s business.

• Mission driven: You are motivated by Headway’s mission, increasing access to high quality mental health care.

OUR INTERVIEW PROCESS

After you apply to Headway, here are some details of what to expect during the interview process.

• Initial screen: You’ll connect with someone in recruiti

Sourced directly from the company's job board — apply on their site.