Security Engineer (Product)
Headway · Remote
About the role
An early member of Headway's security team who builds the company's in-house product and application security practice for a platform used by therapists, patients and insurers. The engineer joins product design and development to review new features, audits existing products for vulnerabilities, builds agentic tooling that finds and fixes code problems across a fast-growing codebase, sets guardrails so developers are secure by default, and helps with incident response, vulnerability management and penetration testing. The stack includes Python, TypeScript, AWS, Snyk and Semgrep.
Headway wants two or more years in security or software engineering with a track record on security projects or as a security generalist, comfort with design and code reviews, and enthusiasm for AI-driven product security.