Senior Infrastructure Security Engineer

Headway; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Headway is seeking an early member of its Security team to help shape secure systems and privacy for therapists, patients, and payers. You will partner with Product and Infrastructure to design and implement secure platforms, establish guardrails, and drive resilient infrastructure across Headway’s AWS footprint.

You will participate in incident response, vulnerability management, security reviews, and ongoing security operations to maintain a world-class security program.

Qualifications

• Early member of the Security team focused on security and privacy for all customers.
• Collaborate with Product and Infrastructure to build platforms and infrastructure that accelerate product development while reducing risk.
• Define and implement infrastructure guardrails so developers can build securely by default.

Responsibilities

• Partner with Product and Infrastructure teams to build platforms and infrastructure that accelerate product development while reducing risk.
• Perform security reviews and design decisions across systems.
• Continuously improve Headway's critical infrastructure and security posture.
• Assist in incident response, vulnerability management, and security operations to maintain world-class security.

Skills

Security engineering

Incident response

Vulnerability management

System security reviews

Cloud security

Secure by default design

Tools

Wiz

Cloudflare

AWS

Python

TypeScript

FastAPI

React

SQLAlchemy

Job description

1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway's mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that.But we're going further. Over 75,000 providers across all 50 states run their practice on our software, serving over 1 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale. We aren't just a billing layer; we are becoming the platform where care actually happens.We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

About the role

The Security team at Headway is focused on security and privacy for all of Headway's customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you'll have the unique opportunity to be the builder and driver of our dedicated, in-house security engineering efforts. In this role, you will partner closely with our engineering teams to ensure that Headway systems are designed and managed securely so that we can maintain and grow customers' trust in Headway.

What you'll do at Headway:

Partner with Product and Infrastructure teams: Headway has many new product launches on the horizon that will transform the industry and have a rich data component. You will be a partner with teams to build platforms and infrastructure that accelerate product development while reducing risk, including (but not limited to):

• System engineering or implementation efforts
• Doing security reviews
• Helping with system design decisions
• Continuous improvement of Headway's critical infrastructure
• Make the safe way, the easy way: Work on defining and building infrastructure and application guardrails so that developers can build securely by default.
• You also will work to instill a culture of secure system design across engineering.
• Build out and mature Headway's cloud security posture: Build an AI-native approach to configuration standards, hardening, and vulnerability remediation across our AWS footprint.
• Assist in ongoing security operations: You will be part of the security and have responsibilities to assist in incident response, vulnerability management, security reviews, and other operational tasks to ensure that our security program is operating at a world-class level.

Tools we use:

AI: Anthropic, Cursor, LangsmithCloud Security: Wiz, CloudflareLanguages: Python 3, TypeScriptLibraries: FastAPI, SQLAlchemy, ReactDat