Senior Infrastructure Security Engineer

About the role

The Security team at Headway is focused on security and privacy for all of Headway's customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you'll have the unique opportunity to be the builder and driver of our dedicated, in-house security engineering efforts. In this role, you will partner closely with our engineering teams to ensure that Headway systems are designed and managed securely so that we can maintain and grow customers' trust in Headway.

What you'll do at Headway:

• Partner with Product and Infrastructure teams to build platforms and infrastructure that accelerate product development while reducing risk, including system engineering or implementation efforts, security reviews, system design decisions, and continuous improvement of Headway's critical infrastructure.
• Make the safe way, the easy way: define and build infrastructure and application guardrails so that developers can build securely by default, and instill a culture of secure system design across engineering.
• Build out and mature Headway's cloud security posture: build an AI-native approach to configuration standards, hardening, and vulnerability remediation across our AWS footprint.
• Assist in ongoing security operations: assist in incident response, vulnerability management, security reviews, and other operational tasks to ensure that our security program is operating at a world-class level.

Tools we use:

• AI: Anthropic, Cursor, Langsmith
• Cloud Security: Wiz, Cloudflare
• Languages: Python 3, TypeScript
• Libraries: FastAPI, SQLAlchemy, React
• Datastores: Postgres, Redis
• Infrastructure: AWS (Fargate, ECS, K8s, S3, and more)
• Monitoring: Datadog, PagerDuty
• Version Control: Github
• Vulnerability Management: Wiz, Semgrep

You'll be great for this role if you have:

• Have 0 → 1 security experience: You have 5+ years experience in security and/or software engineering roles with a demonstrated history of working on security-related projects or with responsibilities as a security generalist.
• Strong cross-functional experience: You love partnering with other teams to help both teams achieve their goals.
• Strong technical depth and breadth: You have technical experience with building secure platforms and products at a deep level. You are excited to perform security design and code reviews. You want to understand security systems and improve their efficiency and scalability.
• Excited by AI's potential: You believe AI will fundamentally reshape how infrastructure security works, and you want to be at the forefront of making that happen.
• Thrive in ambiguity: You love tackling ambiguous problems in a fast-paced environment with an optimistic and energizing attitude.
• Innovation at Scale: You seek opportunities to lead the industry in implementing the latest security and privacy technologies.
• Results driven: You care deeply about creating impact and driving results for Headway's business.
• Mission driven: You are motivated by Headway's mission, increasing access to high quality mental health care.