headway - Senior Security Engineer (Infrastructure)

• Partner with Product and Infrastructure teams: Headway has many new product launches on the horizon that will transform the industry and have a rich data component. You will be a partner with teams to build platforms and infrastructure that accelerate product development while reducing risk, including (but not limited to): • System engineering or implementation efforts • Doing security reviews • Helping with system design decisions • Continuous improvement of Headway's critical infrastructure • Make the safe way, the easy way: Work on defining and building infrastructure and application guardrails so that developers can build securely by default. You also will work to instill a culture of secure system design across engineering. • Build out and mature Headway's cloud security posture: Build an AI-native approach to configuration standards, hardening, and vulnerability remediation across our AWS footprint. • AI: Anthropic, Cursor, Langsmith • Cloud Security: Wiz, Cloudflare • Languages: Python 3, TypeScript • Libraries: FastAPI, SQLAlchemy, React • Datastores: Postgres, Redis • Infrastructure: AWS (Fargate, ECS, K8s, S3, and more) • Monitoring: Datadog, PagerDuty • Version Control: Github • Vulnerability Management: Wiz, Semgrep • YOU’LL BE GREAT FOR THIS ROLE IF YOU HAVE: • Strong cross-functional experience: You love partnering with other teams to help both teams achieve their goals. • Strong technical depth and breadth: You have technical experience with building secure platforms and products at a deep level. You are excited to perform security design and code reviews. You want to understand security systems and improve their efficiency and scalability. • Excited by AI’s potential: You believe AI will fundamentally reshape how infrastructure security works, and you want to be at the forefront of making that happen. • Thrive in ambiguity: You love tackling ambiguous problems in a fast-paced environment with an optimistic and energizing attitude. • Innovation at Scale: You seek opportunities to lead the industry in implementing the latest security and privacy technologies. • Results driven: You care deeply about creating impact and driving results for Headway’s business. • Mission driven: You are motivated by Headway’s mission, increasing access to high quality mental health care. • We believe a team's strength is in its people, and we cannot achieve this mission without a team that reflects the diversity of this problem – across race, ethnicity, gender, sexuality, age, national origin, religion, family status, disability, military status, and experience. Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or receive other benefits and privileges of employment, please inform the recruiter when they contact you to schedule your interview. • Headway participates in E-Verify. To learn more, click here. https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf • A notice to Headway applicants: To protect yourself against phishing and recruitment fraud, please note that Headway only accepts applications through our official careers page at https://headway.co/careers. Headway will never refer you to external websites, ask for payment or personal information, or conduct interviews via messaging apps. All official communication will come from a @findheadway.com http://findheadway.com email address. If you are contacted by someone claiming to be from Headway via an unofficial channel, please do not share any information and report it as spam.