Security Engineer (Detection & Response)

The job

LIVE Employer public job feed (private-sector employer) Source: the employer's public careers feed · Data: listed 2026-11-03

Job description

1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that.

But we're going further. Over 90,000 providers across all 50 states run their practice on our software, serving over 2.6 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale, and building much of it with AI. We aren't just a billing layer; we are becoming the platform where care actually happens.

We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.

About the role

The Security team at Headway is responsible for the security and privacy of all of Headway's customers — therapists, patients, and payer partners (insurance companies and health systems). As a Security Engineer on our Detection & Response team, you'll help build the capabilities we use to identify, respond to, and contain potential threats across our production and corporate environments — ensuring our logging is adequate and accessible, our detections cover real-time monitoring and alerting, and our incident response is well-documented and well-rehearsed.

This role scales alongside the volume of data our business generates and consumes, and alongside our ambition to work smarter — not just harder — by applying automation and AI where it genuinely helps, and knowing when it doesn't.

What you'll do at Headway:

• Detection engineering: Build and refine detections, logging/telemetry coverage, and tooling (SIEM/ETL pipeline refinement) so we have real-time visibility into anomalous and malicious activity across cloud, corporate, and SaaS environments.

• Incident response engineering: Run incident response activities, threat hunting, and threat modeling — and continuously improve our processes and documentation so the team gets faster and sharper after every incident.

• AI security tooling and automation: Implement automation and AI where it's the right tool for the job — and push back when it isn't. You'll help define what "AI-forward" detection and response looks like at Headway without over-rotating on it.

• Security alert triage: Triage security alerts and build deep familiarity with our environment so you can separate signal from noise quickly.

• Team contributions: Participate in the security on-call rotation, author runbooks, contribute to security education and partnership across engineering, and mentor peers.

• Documentation: Keep detections, logging capabilities, runbooks, response processes, and threat intel well-documented so knowledge compounds across the team.

Tools we use:

• Languages: Python 3, TypeScript

• Infrastructure: AWS (Fargate, ECS, S3, and more)

• Datastores: PostgreSQL, Snowflake

• Monitoring & Response: Datadog, PagerDuty

• Version Control: GitHub

• Security Tooling: Anthropic, Wiz, Semgrep, Datadog, Tines

You’ll be great for this role if you have:

• Dedicated experience of 1-2+ years with responsibilities related to security response and automation OR a security-adjacent engineering background

• 4-5+ years in related areas — DevOps, IT, software engineering, or similar with concrete security responsibilities or overlap. Comfortable scripting/coding to build and automate your own tooling.

• SIEM/observability experience: You've worked with logging, detection, or observability platforms in a cloud or distributed environment. The specific stack matters less than your understanding and approach.

• Sound judgment on AI and automation: You're willing to implement AI and automation where it helps, and just as willing to recognize when a deterministic tool — or a human — is the better call.

• Comfort with high autonomy: You thrive in an async, high-autonomy environment and can prioritize your own work without a lot of hand-holding.

• Strong cross-functional collaboration: You work well with technical and non technical teams to understand detection and response needs and keep several projects moving at once.

• Mission driven: You're motivated by Headway's mission of increasing access to high-quality mental healthcare.

Nice to have (optional, not required):

• Experience in a regulated environment (e.g. healthcare, finance, federal)

• Experience with automation/SOAR tooling

• Detection-as-Code or Infrastructure-as-Code experience

• A track record of prioritizing and shipping risk-based detections, running threat modeling, or building alert pipelines

Comprehensive benefits:

Medical, dental, vision, HSA/FSA, 401(k) including match for 2027!, Carrot Fertility reimbursement, and paid parental, medical and caregiver leave.

We believe a team's strength is in its people, and we cannot achieve this mission without a team that reflects the diversity of this problem – across race, ethnicity, gender, sexuality, age, national origin, religion, family status, disability, military status, and experience. Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or receive other benefits and privileges of employment, please inform the recruiter when they contact you to schedule your interview.

Headway participates in E-Verify. To learn more, click here.

A notice to Headway applicants: To protect yourself against phishing and recruitment fraud, please note that Headway only accepts applications through our official careers page at https://headway.co/careers. Headway will never refer you to external websites, ask for payment or personal information, or conduct interviews via messaging apps. All official communication will come from a @findheadway.com email address. If you are contacted by someone claiming to be from Headway via an unofficial channel, please do not share any information and report it as spam.

Explore around this job

Field: Technology Sub-niche: Cybersecurity All jobs at Headway

View this job and apply on the employer's page →

You apply on the employer's page; AtiveSite does not receive or process applications and is not affiliated with the employer. The description above is shown as the source published it.

About the role

This is a — role in the Technology field (Cybersecurity) at Headway.

We could not match this job title to one occupation in the official wage statistics, so no pay estimate is shown. Pay is not in the source listing; ask the employer for the range and compare in the 240 job niches.

How to prepare and behave

This is editorial guidance, not information from the employer.

• Read the whole description and match your examples to its requirements; use the same words the posting uses where they are true for you.
• Research the employer before the interview: what it does, who its customers are and recent news; prepare two or three questions about the work.
• Arrive early (or log in early for a video call), dress one step above the daily dress code, and test your camera and audio beforehand.
• Answer with short stories: the situation, what you did and the result. Give numbers when you have them and never invent them.
• Be honest about gaps; say what you did to learn and how fast you can close them.
• Ask about the team, the first 90 days, how success is measured and the schedule; do not open with salary and time off.
• When pay comes up, know the market range for the occupation and your lowest acceptable offer before you answer; ask for the full package in writing.
• Send a short thank-you message within a day, mentioning one thing you discussed.
• The listing mentions a remote or flexible location. Confirm with the employer whether remote work applies to your state: taxes, licensing and benefits can depend on where you live.
• Have code, data work or projects you can show, and be ready to think aloud: many technical interviews test how you reason, not only the answer.

Know your rights as a candidate and an employee:

• U.S. Equal Employment Opportunity Commission: prohibited employment practices
• U.S. Department of Labor: Wage and Hour Division
• CareerOneStop (U.S. Department of Labor): job search help, interview tips and resumes
• USA.gov: avoiding job scams

The city

The listing is remote or has no US state we could identify. Read the country guide for pay, taxes, law and cost of living by state.

Where to live

The job city has no coordinates we can place on the map, so no housing comparison is shown. Use the 250 largest cities table to compare rent and income.

Career paths

We could not match this title to one occupation, so here are the other sub-niches in Technology, where your skills may carry over:

Data, analytics and AI (3366) Software engineering (4089) Cloud, IT and infrastructure (1040) Product management (836)

Distances

This job has no single city we can place on the map (remote, flexible or unmatched location), so no distance table is shown. Browse all Technology jobs with distances from any of the 20 largest cities.

The employer

Headway is the employer in this listing. See all its open jobs here →

We do not hold headcount or revenue for this employer. Check its careers site and, if it is listed on a stock exchange, its public filings (SEC EDGAR search).

What it is like to work at a company (culture, schedules, benefits) is not in the source data, so we do not describe it. Read the description and ask the questions under "How to prepare".

Other open jobs at Headway

Similar jobs

Same sub-niche: Cybersecurity

All Cybersecurity jobs → · All Technology sub-niches →

FAQ

What is the Security Engineer (Detection & Response) job at Headway?

A private-sector role in technology (cybersecurity) listed 6 days ago. The full description is on this page and on the employer's page.

Where is this job?

Remote / flexible (United States). A remote or flexible location is listed; confirm with the employer which states are accepted.

How do I apply?

Use the "View this job and apply on the employer's page" button. AtiveSite does not receive applications.

How much does it pay?

The listing does not publish pay, and we could not match the title to one official occupation.

What is the cost of living there?

See the state or country guide for rent, income and taxes.

How old is this listing?

It was posted on 2026-11-03 (6 days ago). Jobs older than 90 days are not shown.

Are there similar jobs?

Yes: browse cybersecurity jobs in the United States.

Sources and terms

• Job data: Headway careers page public feed (listing dated 2026-11-03). The job disappears from this site when it disappears from the source.
• Wages and projections: BLS OEWS (May 2025) and Employment Projections 2025–35.
• City and county figures: Census Bureau ACS 2020–2024, BEA, BLS QCEW and LAUS, NASA POWER climatology; distances from Census Gazetteer coordinates.

AtiveSite is not affiliated with or endorsed by the employer or any government agency, and does not process applications. Verify every detail with the employer before acting.

Sources

• BLS OEWS (wages and employment by occupation, May 2025)
• BLS Employment Projections 2025–35
• BLS Local Area Unemployment Statistics
• BLS JOLTS
• BLS State and Metro Area Employment
• Census Bureau American Community Survey (via Census Reporter)
• BEA GDP by state and Regional Price Parities
• IRS 2026 tax adjustments
• U.S. Department of Labor, minimum wage by state
• Tax Foundation state income tax rates 2026
• USAJOBS
• USCIS
• U.S. Department of State, visas
• NASA POWER climatology
• GeoNames / Census Gazetteer (coordinates)