Senior Security Engineer (Product Security)

Position Overview

• Location Type: Remote
• Employment Type: Full-time
• Salary: Not specified

Headway's mission is to build a new mental health care system everyone can access. We’ve built technology that helps people find great therapists with the first software-enabled national network of providers accepting insurance. 1 in 4 people in the US have a treatable mental health condition, but the majority of providers don’t accept insurance, making therapy too expensive for most people. Headway is building a new mental healthcare system that everyone can access by making it easy for therapists to accept insurance and scale their practice. Headway was founded in 2019. Since then, we’ve grown into a diverse, national network of over 45,000 mental healthcare providers across all 50 states who run their practice on our software and have served over 1 million patients. We’re a Series D company with over $325m in funding from a16z (Andreessen Horowitz), Accel, GV (formerly Google Ventures), Spark Capital, Thrive Capital, Forerunner Ventures and Health Care Service Corporation. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

About the Role

The Trust team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house application and product security engineering efforts. In this role, you will partner closely with our product and engineering teams to ensure that our products are designed and developed securely so that we can maintain and grow customers’ trust in Headway.

Responsibilities

• Partner with Product and Engineering: Headway has many new product launches on the horizon that will transform the industry and have a rich data component. You will be a partner at both the design and development stage to ensure that we implement new features securely, including (but not limited to):
  • Participating in the implementation efforts
  • Doing security reviews
  • Helping with product design decisions
  • Auditing and surfacing vulnerabilities in our current products
• Develop and Improve our Automated Tooling: Further enhance our automated tooling to scale our product security capabilities and find potential code problems both before and after we deploy.
• Make the safe way, the easy way: Work on defining and building application guardrails so that developers can build securely by default. You also will work to instill a culture of secure development across engineering.
• Assist in ongoing security operations: You will be part of the security and privacy team and have responsibilities to assist in incident response, vulnerability management, penetration testing, security reviews, and other operational tasks to ensure that our security program is operating at a world-class level.

Requirements

• (No specific requirements listed in the provided text)

Application Instructions

• (No specific application instructions listed in the provided text)

Company Information

• Founded: 2019
• Funding: Series D ($325m)
• Investors: a16z (Andreessen Horowitz), Accel, GV (Google Ventures), Spark Capital, Thrive Capital, Forerunner Ventures, Health Care Service Corporation
• Network Size: Over 45,000 mental healthcare providers