Security Engineer, Incident Response

Position Overview

Headway is seeking a Security Engineer to join our growing Trust team. This role is foundational to building our incident response and security operations capabilities. You will be instrumental in designing and automating our response processes, ensuring rapid containment and remediation of threats across our production and corporate environments. You will collaborate with Security, IT, and Engineering teams to build scalable security automations, lead investigations, and drive continuous improvement in our ability to respond to security events.

About Headway

Headway's mission is to build a new mental health care system that everyone can access. We have developed a software-enabled national network of providers that helps people find therapists who accept insurance. Currently, the majority of mental health providers do not accept insurance, making therapy unaffordable for many. Headway aims to change this by making it easier for therapists to accept insurance and grow their practices.

Founded in 2019, Headway has grown into a diverse, national network of over 45,000 mental healthcare providers across all 50 states. Our software supports these providers, and we have served over 1 million patients. We are a Series D company with over $325 million in funding from prominent investors including a16z, Accel, GV, Spark Capital, Thrive Capital, Forerunner Ventures, and Health Care Service Corporation. We are committed to making your time here the most meaningful experience of your career and invite you to join us in transforming mental healthcare.

Responsibilities

• Lead Security Incident Response Readiness and Execution: Design, build, and refine incident response processes, including playbooks, tooling, and automations to reduce manual overhead and speed up remediation.
• Automate Security Workflows: Develop scalable automations to streamline detection triage, investigation, and response, integrating with internal systems and third-party platforms.
• Mitigate Identified Risks: Collaborate with Engineering and Trust teams to remediate risks identified during and after the lifecycle of a security incident.
• Build and Maintain Response Infrastructure: Own the systems and integrations that support real-time alerting, case management, and incident tracking.
• Continuously Improve Event Coverage: Ensure comprehensive visibility across our environments (cloud, corporate, SaaS, and endpoints), identify telemetry gaps, and lead efforts to close them.
• Support Broader Security Operations: Contribute to vulnerability management, penetration testing coordination, and security reviews, helping to scale Headway’s security posture through automation and repeatable processes.

Tools We Use

• Languages: Python 3, TypeScript
• Libraries: FastAPI, SQLAlchemy, Celery, React/Remix
• Datastores: PostgreSQL, Snowflake
• Infrastructure: AWS (Fargate, ECS, S3), Kafka
• Monitoring & Response: Datadog, PagerDuty
• Version Control: GitHub
• Security Tooling: Snyk, Semgrep, custom tooling, and SOAR integrations

Qualifications

• Deep Incident Response Experience: Proven experience leading or contributing to major security incident investigations, including developing playbooks, processes, and tooling to enhance response capabilities.
• Passion for Automation: Demonstrated success in building or implementing automated workflows that reduce Mean Time To Respond (MTTR) and increase consistency in security operations.
• Strong Engineering Foundation: Proficiency in writing production-quality code and building internal tools and systems to support security operations.

Employment Type:

• [Not Specified]

Location Type:

• [Not Specified]

Salary:

• [Not Specified]

Application Instructions:

• [Not Specified]