Senior Security Engineer (Incident Response & Automations)

Senior Security Engineer (Incident Response & Automations)

New York, New York, United States; Remote; San Francisco, California, United States; Seattle, Washington, United States

Headway’s mission is to build a new mental health care system everyone can access. We’ve built technology that helps people find great therapists with the first software-enabled national network of providers accepting insurance.

1 in 4 people in the US have a treatable mental health condition, but the majority of providers don’t accept insurance, making therapy too expensive for most people. Headway is building a new mental healthcare system that everyone can access by making it easy for therapists to accept insurance and scale their practice.

Headway was founded in 2019. Since then, we’ve grown into a diverse, national network of over 60,000 mental healthcare providers across all 50 states who run their practice on our software and have served over 1 million patients. We’re a Series D company with over $325m in funding from a16z (Andreessen Horowitz), Accel, GV (formerly Google Ventures), Spark Capital, Thrive Capital, Forerunner Ventures and Health Care Service Corporation.

We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

About the role

The Trust team at Headway is responsible for safeguarding the privacy and security of our therapists, patients, and payer partners. As one of the first dedicated Security Engineers on our budding D&R pod, you’ll play a foundational role in building our incident response and security operations capabilities. Your work will center around designing and automating our response processes, ensuring we can rapidly contain and remediate threats across our production and corporate environments.

You’ll collaborate closely with Security, IT, and Engineering teams to build scalable and efficient security automations, lead investigations, and drive continuous improvement in our ability to respond to security events with speed and precision.

What you’ll do at Headway :

• Lead security incident response readiness and execution : Design, build, and refine our incident response processes, including playbooks, tooling, and automations that reduce manual overhead and speed up remediation.
• Automate security workflows : Develop scalable automations that streamline detection triage, investigation, and response, integrating with internal systems and third-party platforms.
• “Close the loop” by mitigating identified risks : Work with Engineering and Trust teams to remediate risks identified during and after the lifecycle of a security incident
• Build and maintain response infrastructure : Own the systems and integrations that support real-time alerting, case management, and incident tracking.
• Continuously improve event coverage : Ensure comprehensive visibility across our environments (cloud, corporate, SaaS, and endpoints), identify telemetry gaps, and lead efforts to close them.
• Support broader security operations : Contribute to vulnerability management, penetration testing coordination, and security reviews, helping to scale Headway’s security posture through automation and repeatable processes.

Tools we use :

You’ll be great for this role if you have :

Care deeply about impact : You want your work to contribute directly to a meaningful mission—improving access to mental healthcare.

Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and / or receive other benefits and privileges of employment, please inform the recruiter when they contact you to schedule your interview.

#J-18808-Ljbffr