Security Engineer (Detection & Response)

Headway; United States; A distancia; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, dental, vision

401(k) with match

Fertility reimbursement

Parental leave

Caregiver leave

Descripción de la vacante

Headway is building a platform to make mental healthcare accessible. The Security Engineer on the Detection & Response team will help identify, respond to, and contain threats across production and corporate environments, ensuring robust logging, real-time detections, and well-documented incident response.

This role emphasizes automation, AI responsibly, on-call rotation, and collaboration with engineering.

Formación

• 1–2+ years with responsibilities related to security response and automation or a security-adjacent engineering background.
• 4–5+ years in related areas—DevOps, IT, software engineering, or similar with concrete security responsibilities or overlap; able to script and automate tooling.
• SIEM/observability experience: worked with logging, detection, or observability platforms in a cloud or distributed environment.
• Good judgment on AI and automation: use AI/automation where it helps; fallback to deterministic tools or humans as needed.
• Comfort with high autonomy: thrive in async, high-autonomy environments with limited hand-holding.
• Strong cross-functional collaboration: work with technical and non-technical teams across multiple projects.
• Mission-driven: motivated by Headway's mission to increase access to mental healthcare.

Responsabilidades

• Detection engineering: build and refine detections, logging coverage, and tooling for real-time visibility across cloud, corporate, and SaaS environments.
• Incident response engineering: run IR activities, threat hunting, and threat modeling; improve processes and documentation.
• AI security tooling and automation: implement automation and AI where appropriate and define what AI-forward detection looks like.
• Security alert triage: triage alerts and build familiarity with the environment to distinguish signal from noise.
• Team contributions: participate in on-call rotation, write runbooks, educate security, and mentor peers.
• Documentation: keep detections, logging, runbooks, response processes, and threat intel well-documented.

Conocimientos

Security response

Detection engineering

Automation

Scripting

Collaboration

Autonomy

AI awareness

Herramientas

Python

TypeScript

AWS

Datadog

PagerDuty

PostgreSQL

Snowflake

GitHub

Anthropic

Wiz

Semgrep

Tines

Descripción del empleo

1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that.

But we're going further. Over 90,000 providers across all 50 states run their practice on our software, serving over 2.6 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale, and building much of it with AI. We aren't just a billing layer; we are becoming the platform where care actually happens.

We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

About the role

The Security team at Headway is responsible for the security and privacy of all of Headway's customers — therapists, patients, and payer partners (insurance companies and health systems). As a Security Engineer on our Detection & Response team, you'll help build the capabilities we use to identify, respond to, and contain potential threats across our production and corporate environments — ensuring our logging is adequate and accessible, our detections cover real-time monitoring and alerting, and our incident response is well-documented and well-rehearsed.

This role scales alongside the volume of data our business generates and consumes, and alongside our ambition to work smarter — not just harder — by applying automation and AI where it genuinely helps, and knowing when it doesn't.

What you'll do at Headway:

• Detection engineering: Build and refine detections, logging/telemetry coverage, and tooling (SIEM/ETL pipeline refinement) so we have real-time visibility into anomalous and malicious activity across cloud, corporate, and SaaS environments.

• Incident response engineering: Run incident response activities, threat hunting, and threat modeling — and continuously improve our processes and documentation so the team gets faster and sharper after every incident.

• AI security tooling and automation: Implement automation and AI where it's the right tool for the job — and push back when it isn't. You'll help define what "AI-forward" detection and response looks like at Headway without over-rotating on it.

• Security alert triage: Triage security alerts and build deep familiarity with our environment so you can separate signal from noise quickly.

• Team contributions: Participate in the security on-call rotation, author runbooks, contribute to security education and partnership across engineering, and mentor peers.

• Documentation: Keep detections, logging capabilities, runbooks, response processes, and threat intel well-documented so knowledge compounds across the team.

Tools we use:

• Languages: Python 3, TypeScript

• Infrastructure: AWS (Fargate, ECS, S3, and more)

• Datastores: PostgreSQL, Snowflake

• Monitoring & Response: Datadog, PagerDuty

• Version Control: GitHub

• Security Tooling: Anthropic, Wiz, Semgrep, Datadog, Tines

You’ll be great for this role if you have:

• Dedicated experience of 1-2+ years with responsibilities related to security response and automation OR a security-adjacent engineering background

• 4-5+ years in related areas — DevOps, IT, software engineering, or similar with concrete security responsibilities or overlap. Comfortable scripting/coding to build and automate your own tooling.

• SIEM/observability experience: You've worked with logging, detection, or observability platforms in a cloud or distributed environment. The specific stack matters less than your understanding and approach.

• Sound judgment on AI and automation: You're willing to implement AI and automation where it helps, and just as willing to recognize when a deterministic tool — or a human — is the better call.

• Comfort with high autonomy: You thrive in an async, high-autonomy environment and can prioritize your own work without a lot of hand-holding.

• Strong cross-functional collaboration: You work well with technical and non technical teams to understand detection and response needs and keep several projects moving at once.

• Mission driven: You're motivated by Headway's mission of increasing access to high-quality mental healthcare.

Nice to have (optional, not required):

• Experience in a regulated environment (e.g. healthcare, finance, federal)

• Experience with automation/SOAR tooling

• Detection-as-Code or Infrastructure-as-Code experience

• A track record of prioritizing and shipping risk-based detections, running threat modeling, or building alert pipelines

Comprehensive benefits:

Medical, dental, vision, HSA/FSA, 401(k) including match for 2027!, Carrot Fertility reimbursement, and paid parental, medical and caregiver leave.

We believe a team's strength is in its people, and we cannot achieve this mission without a team that reflects the diversity of this problem – across race, ethnicity, gender, sexuality, age, national origin, religion, family status, disability, military status, and experience. Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or receive other benefits and privileges of employment, please inform the recruiter when they contact you to schedule your interview.

Headway participates in E-Verify. To learn more, click here.