Senior/Staff Security Engineer, Incident Response

Transformcap; San Francisco (CA); Hybrid; USD 217,000 - 288,000; Full time

Benefits offered by this job

Health benefits

Grow for Grow

Financial wellness

Flexible time off

Parental leave

Mental health time

Wellness stipend

Commuter benefits

Home office & meals

Additional perks

Job summary

Grow Therapy is seeking a Senior or Staff level security leader to own detection and incident response. The role emphasizes rapid detection, cross-functional collaboration, and developing a mature security program across endpoint, network, and cloud.

You will work with infrastructure, engineering, and compliance to implement secure-by-default architecture and proactive threat hunts. Remote/hub options support flexible work arrangements.

Qualifications

• 6+ years of experience in detection and incident response.
• Deep AWS security knowledge: IAM, CloudTrail, SCPs, AWS Organizations, Config.

Responsibilities

• Share security judgment and standards across teams.
• Investigate and resolve security incidents across endpoint, network, and cloud.
• Research threats relevant to healthcare marketplace and preempt them with intelligence.
• Build and mature detection and response program; participate in on-call rotation.
• Strengthen cloud security posture with infra, engineering, and compliance.

Skills

IR expertise

AWS security

SIEM

EDR

CSPM

Code automation

cross-functional collaboration

risk assessment

Education

Bachelor's degree in CS or related

Tools

SIEM

EDR

CSPM

AWS Config

Job description

Grow Therapy is on a mission to serve as the trusted partner for therapists growing their practice, and patients accessing high-quality care. Powered by technology, we are a three-sided marketplace that empowers providers, augments insurance payors, and serves patients. Following the mass increase in depression and anxiety, the need for accessibility is more important than ever. To make our vision for mental healthcare a reality, we’re building a team of entrepreneurs and mission-driven go-getters. Since launching in February 2021, we’ve empowered more than ten thousand therapists and hundreds of thousands of clients across the country and insurance landscape. We’ve raised more than $328Mm in funding, including our Series D, at a $3B valuation from Sequoia Capital, Transformation Capital, TCV, SignalFire, Menlo Ventures, Goldman Sachs Alternatives, and others.

The Opportunity

This is a Senior or Staff level role owning detection and incident response at Grow. The core of the job is: catching threats early through strong detection engineering, moving fast on unfamiliar systems when something does happen, and having a real point of view on where the architecture is exposed before it becomes a problem. It's cross functional by design, working closely with infrastructure, engineering, and compliance.

What You'll Be Doing

• Share security judgment and standards with teams across the company, raising the bar beyond the security org itself

• Investigate and resolve security incidents across endpoint, network, and cloud, understanding unfamiliar systems well enough to respond with confidence

• Research the threats and attack methods most relevant to a healthcare marketplace, and use that intelligence to get ahead of them

• Build and mature Grow's detection and response program, and participate in an incident on call rotation

• Strengthen our cloud security posture in partnership with infrastructure, engineering, and compliance

• Build defense in depth through secure by default architecture and processes, thinking through the full lifecycle of a problem rather than just patching the immediate risk

• Design new, creative approaches to catching threats early, not just tuning what already exists

You'll Be a Good Fit If

• You have 6+ years of experience in detection and incident response

• You have real depth in AWS security: IAM, secure service configuration, CloudTrail, SCPs, AWS Organizations, Config, and the like

• You have deep expertise responding to complex incidents and a strong grasp of detection engineering, including SIEM, EDR, and CSPM tooling

• You care about how security work lands on the people around you, from customers whose data you protect to the engineers you partner with

• You write code to automate the tedious parts of the job, and you're comfortable with infrastructure as code

• You collaborate well, both within a security team and across engineering more broadly

• You think about the whole solution, not just the technology, and can weigh competing design choices with real conviction

• You understand the current threat landscape and know how to assess risk against it

Employment Type: Full Time, Exempt
Base Compensation: The base compensation range for this position is:

• Hybrid Commitment: $217,000–$288,000 USD Annually

• Fully Remote Commitment: $182,000- $240,000 USD Annually

This role can be hybrid (onsite from our NYC, San Francisco, or Seattle hub location three days per week: Tuesday, Wednesday, Thursday) or fully remote. Both arrangements include travel 2–3 times per year (e.g., company and department offsites).

The base compensation for this role will vary depending on several factors, including relevant experience, qualifications, and the candidate’s working location.

Full Time Employee Benefits:

• Health Benefits: Comprehensive medical, dental, vision, life, and disability coverage.

• Grow for Grow: No cost access to therapy through the Grow platform (available to US employees)

• Financial Wellness: Retirement savings programs and equity opportunities to help you invest in your future.

• Flexible Time Off, Paid Holidays & Winter Break: Flexible time off, company paid holidays (which vary by country), and a full company wide Winter Break to rest and recharge

• Parental Leave: Up to 18 weeks of paid parental leave to support you and your growing family and a new child stipend.

• Mental Health Mornings/Afternoons: Dedicated weekly flexible time for self care, whether that's therapy, exercise, journaling, time with family, or simply taking a break.

• Wellness & Development Stipend: Annual stipend to support your personal wellbeing and professional growth, from fitness and education to books and learning resources.

• Commuter Benefits: Pre tax commuter benefits to support teammates working from one of our hub locations.

• Home Office & Meals: Support for your home workspace plus meal benefits, with offerings tailored to both remote and hub based employees.

• Additional Perks: A variety of wellbeing benefits, including wellness memberships, virtual care, pet insurance discounts (where available), and global travel assistance.

Research shows that some groups hesitate to apply unless they meet every qualification. If you’re excited about this role but don’t check every box, we encourage apply. At Grow, we value diverse experiences, transferable skills, and the unique strengths each person brings.

Grow Therapy is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

Use of AI Tools: We use certain AI & automated tools to support recruitment. These tools help our team review applications, organize interviews, detect potential application integrity issues, and maintain interview records; they do not make final hiring decisions.

Application Review: Ashby's AI-Assisted Application Review helps review application materials against role-specific criteria and may flag potential fraud or integrity issues for recruiter review. All advancement decisions are made by our human recruiting team after independent review. See Ashby's AI Bias Audit Report.

Interview Recording: We use BrightHire to record interviews, supporting note-taking and consistency across candidates. Learn more. Interviews are confidential; you may ask your interviewer to stop recording anytime, or opt out in advance. Choosing not to be recorded will not, by itself, affect your candidacy.

AI-Assisted Recruiter Screen: For select roles, BrightHire's AI features may help structure initial recruiter screens and organize interview notes. All responses are reviewed by our recruiting team; no hiring decisions are made by AI alone.

State-specific notices: Depending on your location, you may have additional rights. Illinois: If AI analyzes a video interview, we’ll provide notice, explain how it works and what it evaluates, and obtain consent beforehand. New York City: Where required, we’ll provide at least 10 business days’ notice before using an automated employment decision tool and explain how to request an alternative process. Maryland: We do not use facial recognition to create facial templates during interviews unless required notice and written consent are obtained.

Questions, accommodation requests, requests for an alternative selection process, objections to recording, or concerns about AI use? Contact [e-mail]. We’re happy to help or offer an alternative way to participate.