Staff Security Engineer

Grow Therapy

New York (NY)

Hybrid

USD 150,000 - 210,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Comprehensive health coverage

Access to therapy through our platform

Retirement savings and equity

Flexible time off

Paid holidays and a company-wide冬Break

Up to 18 weeks of paid parental leave

Wellness and development stipends

Commuter support

Home office and meal benefits

Other wellbeing perks

Job summary

Grow Therapy in New York City is seeking a senior security engineer to define the security strategy and build scalable controls across product, cloud, and data platforms.

You will partner with engineering, platform, and product teams to embed secure-by-default practices, drive AI-native security, and implement data tagging and risk reporting. This role offers a hybrid work arrangement with strong health, equity, and wellbeing benefits.

Qualifications

Senior security engineer with deep expertise across product, cloud, data security, access governance, and/or detection and response.
Hands-on engineering experience writing code and building security infrastructure.
Proven experience building security programs at scale with reviews, secure design practices, champions, and metrics.
Strong communication to explain security strategy to executives and clinical stakeholders.
Ability to thrive in ambiguous environments and balance long-term strategy with near-term execution.
Full-time, exempt availability.

Responsibilities

Define and advance Security Engineering North Star; shape multi-year vision and actionable roadmap.
Lead AI-native security efforts and safe enterprise adoption of AI tooling across Security, Engineering, and the company.
Design, build, and launch secure-by-default infrastructure including authentication, authorization, audit logging, and egress control.
Own data security at scale by driving data tagging across production models per Data Classification Policy.
Create company-wide security scorecards for real-time posture visibility and continuous security practices.
Partner with engineering, platform, and product teams to deliver high-leverage security services.
Drive automated least privilege and organization-wide vulnerability management.
Collaborate across Product, Platform, Cloud, Compliance, Clinical, and other teams to embed secure thinking.

Skills

deep security expertise across domains

hands-on engineering

security program leadership

communication with executives

ambiguous environment adaptability

full-time availability

Tools

Secure infrastructure tools

Job description

Requirements

Must have:

We are looking for a senior security engineer with deep expertise across multiple security domains, including product security, cloud security, data security, access governance, and/or detection and response.
We need someone with recent hands-on engineering experience who is comfortable writing code, contributing to security infrastructure, and participating in system design reviews.
We expect proven experience building security programs at scale, including organization-wide processes such as security reviews, secure design practices, security champions, and security metrics reporting.
We value strong communication skills, especially the ability to explain security strategy and risk clearly to non-technical audiences, including executives and clinical stakeholders.
We are looking for someone who thrives in ambiguous environments, can prioritize effectively, and balances long-term strategy with near-term execution.
We require full-time, exempt availability.

Responsibilities

We will rely on you to define and advance our Security Engineering North Star by shaping a multi-year vision, identifying gaps, aligning stakeholders, and turning strategy into an actionable roadmap.
You will help lead our AI-native security efforts by influencing safe, thoughtful enterprise adoption of AI tooling across Security, Engineering, and the broader company.
You will design, build, and launch secure-by-default infrastructure, including unified authentication, authorization, audit logging, and egress control.
You will own data security at scale by driving systematic data tagging across our production models in line with our Data Classification Policy.
You will create company-wide security scorecards that provide real-time visibility into posture and make security a continuous practice rather than a periodic audit.
You will partner closely with engineering, platform, and product teams to deliver high-leverage security services and reduce the security burden on individual teams.
You will drive automated least privilege and organization-wide vulnerability management capabilities.
You will collaborate across Product, Platform, Cloud, Compliance, Clinical, and other teams to embed secure-by-default thinking throughout the company.

Company

We are Grow Therapy, a technology-powered three-sided marketplace on a mission to be the trusted partner for therapists growing their practice and for patients seeking high-quality mental healthcare. Since launching in February 2021, we have supported more than ten thousand therapists and hundreds of thousands of clients across the country, and we have raised over $328 million in funding, including a Series D round at a $3 billion valuation backed by Sequoia Capital, Transformation Capital, TCV, SignalFire, Menlo Ventures, Goldman Sachs Alternatives, and others.

This role can be hybrid from our New York City, San Francisco, or Seattle hubs three days per week or fully remote, with travel two to three times per year.

We offer