Senior Security Software Engineer

Headway’s mission is a big one - to build a new mental health care system everyone can access. We’ve built technology that helps people find great therapists with the first software-enabled national network of providers accepting insurance. 

1 in 4 people in the US have a treatable mental health condition, but the majority of providers don’t accept insurance, making therapy too expensive for most people. Headway is building a new mental healthcare system that everyone can access by making it easy for therapists to take insurance and scale their practice. 

Headway was founded in 2019 – since then, we’ve grown into a diverse, national network of over 30,000 mental healthcare providers across all 50 states who run their practice on our software. We’re a Series C company with over $225m in funding from a16z (Andreessen Horowitz), Accel, GV (formerly Google Ventures), Spark Capital, Thrive Capital, and Health Care Service Corporation.

We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

About the role

As a member of Headway’s founding Security Engineering team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house Security engineering efforts. In this role, you will partner with our Lead Security Engineer and Head of Infrastructure to design our next-generation security program, touching all aspects of Headway’s business and systems. You will both technically and organizationally execute security projects ranging from practice changes to technical architecture to security infrastructure development to penetration testing. We're looking for security-focused engineers with software engineering experience who are excited to tackle security challenges in partnership with our core product teams. 

Tools we use:

• Cloud security: Lacework
• Languages: Python 3, TypeScript
• Libraries: FastAPI, SQLAlchemy, React
• Datastores: Postgres, Redis
• Infrastructure: AWS (Fargate, ECS, S3, and more), Spark and Kafka
• Monitoring: Datadog, PagerDuty
• Version control: Github
• Vulnerability Management: Snyk, Semgrep

Projects we’re working on:

There is a lot that we're building at Headway, but here are a few projects to give you an idea of the problems we're tackling in security.

• Infrastructure security: Building and implementing tools that monitor the security posture of our infrastructure and provide for more secure access in a scalable manner as we grow.
• …