Security Engineer (Detection & Response)
Headway · Remote
About the role
A security engineer on Headway's Detection and Response team, working remotely in the US to protect the mental health company's therapists, patients and payer partners across production and corporate environments. The engineer builds and refines detections, logging coverage and SIEM and ETL pipelines across cloud, corporate and SaaS systems, runs incident response, threat hunting and threat modelling, triages alerts, applies automation and AI where it genuinely helps, joins the on-call rotation, writes runbooks and mentors peers.
It asks for one to two years in security response and automation, or a security-adjacent engineering background, with four to five years in DevOps, IT or software engineering, scripting skills and SIEM or observability experience in the cloud.