Senior Application Security Engineer

2 days ago

San Francisco CA United States Tbwa ChiatDay Inc Full time

Headway’s mission is a big one – to build a new mental health care system everyone can access. We’ve built technology that helps people find great therapists with the first software-enabled national network of providers accepting insurance.

1 in 4 people in the US have a treatable mental health condition, but the majority of providers don’t accept insurance, making therapy too expensive for most people. Headway is building a new mental healthcare system that everyone can access by making it easy for therapists to accept insurance and scale their practice.

Headway was founded in 2019. Since then, we’ve grown into a diverse, national network of over 34,000 mental healthcare providers across all 50 states who run their practice on our software. We’re a Series D company with over $325m in funding from a16z (Andreessen Horowitz), Accel, GV (formerly Google Ventures), Spark Capital, Thrive Capital, Forerunner Ventures and Health Care Service Corporation.

We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

About the role

The Trust team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex: insurance companies and health systems). As an early member on the team, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house product and application security engineering efforts. In this role, you will partner closely with our product and engineering teams to ensure that our application is designed and developed securely so that we can maintain and grow customers’ trust in Headway.

What you’ll do at Headway:
  • Partner with Product and Engineering: Headway has many new product launches on the horizon that will transform the industry and have a rich data component. You will be a partner at both the design and development stage to ensure that we implement new features securely, including (but not limited to):
  • Participating in the implementation efforts
  • Doing security reviews
  • Helping with product design decisions
  • Auditing and surfacing vulnerabilities in our current products
  • Develop and Improve our Automated Tooling: Further enhance our automated tooling to scale our application security capabilities and find potential code problems both before and after we deploy.
  • Make the safe way, the easy way: Work on defining and building application guardrails so that developers can build securely by default. You also will work to instill a culture of secure development across engineering.
  • Assist in ongoing security operations: You will be part of the security and privacy team and have responsibilities to assist in incident response, vulnerability management, penetration testing, security reviews, and other operational tasks to ensure that our security program is operating at a world-class level.
Tools we use:
  • Languages: Python 3, TypeScript
  • Libraries: FastAPI, SQLAlchemy, React
  • Infrastructure: AWS (Fargate, ECS, S3, and more), Spark and Kafka
  • Version Control: Github
  • Vulnerability Management: Snyk, Semgrep
You’ll be great for this role if you have:
  • Have 0 → 1 security experience: You have 5+ years experience in security and/or software engineering roles with a demonstrated history of working on security-related projects or with responsibilities as a security generalist.
  • Strong cross-functional experience: You love partnering with other teams to help both teams achieve their goals.
  • Strong technical depth and breadth: You have technical experience with building secure platforms and products at a deep level. You are excited to perform security design and code reviews. You want to understand security systems and improve their efficiency and scalability.
  • Thrive in ambiguity: You love tackling ambiguous problems in a fast-paced environment with an optimistic and energizing attitude.
  • Innovation at Scale: You seek opportunities to lead the industry in implementing the latest security and privacy technologies.
  • Results driven: You care deeply about creating impact and driving results for Headway’s business.
  • Mission driven: You are motivated by Headway’s mission, increasing access to high quality mental health care.
Compensation and Benefits:
  • The starting salary for an Application Security Engineer is $188,000 and increases to $230,000 based on industry tenure and experience.

Benefits offered include:

  • Equity Compensation
  • Medical, Dental, and Vision coverage
  • HSA / FSA
  • 401K
  • Work-from-Home Stipend
  • Therapy Reimbursement
  • 16-week parental leave for eligible employees
  • Carrot Fertility annual reimbursement and membership
  • 13 paid holidays each year as well as a Holiday Break during the week between December 25th and December 31st
  • Flexible PTO
  • Employee Assistance Program (EAP)
  • Training and professional development

We believe a team's strength is in its people, and we cannot achieve this mission without a team that reflects the diversity of this problem – across race, ethnicity, gender, sexuality, age, national origin, religion, family status, disability, military status, and experience.

Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or receive other benefits and privileges of employment, please contact

Headway employees work remotely across the US, with the option to work from offices in New York City and San Francisco. Headway participates in E-Verify.

Apply for this job #J-18808-Ljbffr

  • Senior/Staff Application Security Engineer

    2 days ago

    San Francisco, CA, United States ZipRecruiter Full time

    Job Description Crusoe is building the World’s Favorite AI-first Cloud infrastructure company. We’re pioneering vertically integrated, purpose-built AI infrastructure solutions trusted by Fortune 500 companies to power their most advanced AI applications. Crusoe is redefining AI cloud infrastructure, with a mission to align the future of computing with...

  • Staff Application Security Engineer

    4 weeks ago

    San Francisco, United States IDENTIFY SECURITY Full time

    We are seeking a highly skilled Staff Application Security Engineer with a strong background in cloud software service management and application security to join our dynamic team. In this role, you will play a crucial part in ensuring the reliability, scalability, and security of our software systems and digital experiences. You will work closely with the...

  • Senior Security Systems Engineer and Developer

    1 week ago

    San Francisco, California, United States Microbiz Security Full time

    Job OverviewWe are seeking a skilled Senior Security Systems Engineer and Developer to join our team at Microbiz Security, a leading provider of security solutions in the San Francisco area. As a key member of our technical staff, you will be responsible for designing, installing, and servicing advanced security systems.

  • Sr. Application Security Engineer

    2 weeks ago

    Woodland Hills, CA, United States Ekman Associates, Inc Full time

    Job Description Remember to check your CV before applying Also, ensure you read through all the requirements related to this role. Title: Senior Application Security Engineer Location: Remote - Southern California preferred Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy,...

  • Senior/Staff Application Security Engineer

    3 weeks ago

    San Francisco, United States Crusoe Full time

    Crusoe is building the World's Favorite AI-first Cloud infrastructure company. We're pioneering vertically integrated, purpose-built AI infrastructure solutions trusted by Fortune 500 companies to power their most advanced AI applications. Crusoe is redefining AI cloud infrastructure, with a mission to align the future of computing with the future of the...

  • Senior/Staff Application Security Engineer

    3 weeks ago

    San Francisco, United States Crusoe Full time

    Crusoe is building the World's Favorite AI-first Cloud infrastructure company. We're pioneering vertically integrated, purpose-built AI infrastructure solutions trusted by Fortune 500 companies to power their most advanced AI applications. Crusoe is redefining AI cloud infrastructure, with a mission to align the future of computing with the future of the...

  • Senior Application Security Engineer

    4 weeks ago

    San Francisco, United States Headway Full time

    Headway Find therapists near you who accept insurance. We'll help you find the right fit—and save you money. Get started today with online or in-person sessions.Headway’s mission is a big one – to build a new mental health care system everyone can access. We’ve built technology that helps people find great therapists with the first software-enabled...

  • Senior Application Security Engineer

    2 days ago

    Washington, DC, United States ZipRecruiter Full time

    Position Title: Senior Application Security Engineer Location: Washington, DC (Hybrid) Job Requirements: Strong written and verbal communication skills Must have GitLab CI/CD pipeline experience Responsibilities: Assist in the development and implementation of the DevSecOps strategy to include the definition and goals of the over-arching framework and...

  • Senior Application Security Engineer

    1 month ago

    Draper, UT, United States BAMM Staffing Full time

    Contract to Hire, Onsite in Draper Utah (US Citizen or GC Only)As a Senior Application Security Engineer, you will work to support the various processes and procedures related to application security and gather information from product engineering teams related to these activities. You will make a difference in promoting a culture of security inside the...

  • Senior Application Security Engineer

    4 weeks ago

    Draper, UT, United States BAMM Staffing Full time

    Contract to Hire, Onsite in Draper Utah (US Citizen or GC Only)As a Senior Application Security Engineer, you will work to support the various processes and procedures related to application security and gather information from product engineering teams related to these activities. You will make a difference in promoting a culture of security inside the...

  • Senior Application Security Engineer

    3 weeks ago

    San Francisco, United States Tbwa ChiatDay Inc Full time

    Headway’s mission is a big one – to build a new mental health care system everyone can access. We’ve built technology that helps people find great therapists with the first software-enabled national network of providers accepting insurance.1 in 4 people in the US have a treatable mental health condition, but the majority of providers don’t accept...

  • Staff Embedded Security Engineer

    2 days ago

    San Francisco, CA, United States IDENTIFY SECURITY Full time

    We are currently seeking a Staff Embedded Security Engineer . This position requires an experienced professional with a proven track record of cyber security development achievements. Our ideal candidate exhibits a can-do attitude and approaches his or her work with vigor and determination. Candidates will be expected to demonstrate excellence in their...

  • Senior/Staff Application Security Engineer

    3 weeks ago

    San Francisco, United States ZipRecruiter Full time

    Job DescriptionCrusoe is building the World’s Favorite AI-first Cloud infrastructure company. We’re pioneering vertically integrated, purpose-built AI infrastructure solutions trusted by Fortune 500 companies to power their most advanced AI applications.Crusoe is redefining AI cloud infrastructure, with a mission to align the future of computing with the...

  • Blockchain Senior Security Engineer

    2 days ago

    San Francisco, CA, United States ZipRecruiter Full time

    Blockchain Senior Security Engineer Full Time US, Canada, Europe (Remote) About Informal Informal Systems is committed to making modern financial and Internet infrastructure more decentralized, secure and accessible to everyone. We develop critical blockchain infrastructure ourselves (Informal is a maintainer of Cosmos Hub, Comet and IBC) and we also help...

  • Senior Application Security Engineer, AWS Generative AI Security

    6 months ago

    San Francisco, United States Amazon Development Center U.S., Inc. Full time

    Do you thrive on the challenge of threat modeling and fortifying the defenses of AI/Generative AI and cloud systems? Are you excited by the prospect of identifying customer security expectations for AI systems and influencing builders to embrace secure-by-default practices, making the secure path the seamless choice for our customers? As a Senior Security...

  • Web Application Security Engineer

    3 days ago

    San Francisco, CA, United States Direct Staffing Inc Full time

    Visa candidates are welcome to apply. Shopping has changed more in the past five years than in the past five decades, and going forward, retailing will require investing more in people and technology. With the rapid changes in retail, it is critical that technology be a strategic enabler for our company to accelerate delivery, be adaptive to market changes,...

  • Cloud Security Engineer

    4 days ago

    San Francisco, United States Security Bank & Trust Full time

    Harvey is a secure AI platform for professionals in law, tax, and finance that augments productivity and automates complex workflows. Harvey uses algorithms with reasoning-adept LLMs that have been customized by our expert team of lawyers, engineers, and research scientists. We’ve found product market fit and are scaling our team very quickly. Some reasons...

  • Senior Software Engineer

    4 weeks ago

    San Francisco, United States Abnormal Security Full time

    Job DescriptionJob DescriptionAbout The RoleEnterprises of all sizes trust Abnormal Security's cloud products to stop cybercrime. Being effective at stopping cybercrime, due to its adversarial nature, requires a high level of agility to respond to threats. Our Research and Development organization is forming a group to develop advanced AI-powered...

  • Application Security Engineer

    2 days ago

    Santa Clara, CA, United States Lamwork Full time

    APPLICATION SECURITY ENGINEER RESUME EXAMPLE Updated: July 26, 2024 - The Application Security Engineer plays a crucial role in ensuring the resilience and scalability of web applications, advising on secure design principles, and addressing security issues. Responsibilities include validating, tracking, and prioritizing security issues, developing internal...

  • Senior Security Engineer

    2 days ago

    San Francisco, CA, United States Hayden AI Full time

    Hayden AI A mobile perception platform that goes beyond automated traffic enforcement. Hayden AI is cutting-edge AI for smarter cities.At Hayden AI, we are on a mission to harness the power of artificial intelligence and machine learning to transform the way governments and businesses address real-world challenges.From optimizing bus lane and bus stop...