Headway

Security Engineer (Detection & Response)

Headway
Apply
12 hours ago
Remote, United StatesMid Level / Senior
H1B sponsor

Base Salary

$183k - $215k/yr

Responsibilities

  • Build and refine detections, logging and telemetry coverage, and SIEM/ETL tooling across cloud, corporate, and SaaS environments.
  • Run incident response activities, threat hunting, threat modeling, and security alert triage.
  • Implement and evaluate automation and AI for detection and response, using deterministic tools or human judgment when more appropriate.
  • Participate in the security on-call rotation and improve incident response processes, documentation, and runbooks.
  • Author runbooks, document detections and logging capabilities, maintain threat intelligence documentation, contribute to security education, and mentor peers.

Requirements

  • 1–2+ years of dedicated security response and automation experience or a security-adjacent engineering background.
  • 4–5+ years in DevOps, IT, software engineering, or similar areas with concrete security responsibilities or overlap.
  • Experience with logging, detection, or observability platforms in cloud or distributed environments.
  • Ability to script and code to build and automate security tooling.
  • Sound judgment about when AI and automation are useful and when deterministic tools or human review are preferable.
  • Ability to work autonomously, prioritize work in an async environment, and collaborate with technical and nontechnical teams.
  • Preferred experience includes regulated environments, automation/SOAR tooling, detection-as-code or infrastructure-as-code, threat modeling, risk-based detections, and alert pipelines.

Benefits

  • Medical, dental, vision, HSA/FSA, and 401(k) with a match for 2027.
  • Carrot Fertility reimbursement and paid parental, medical, and caregiver leave.

Tech Stack

Categories

Headway

About Headway

1,001-5,000 employees

Headway builds a software-enabled network that makes it easy for therapists to accept insurance and for patients to find in-network mental health care. Its platform handles credentialing, scheduling, claims, and payment reconciliation, matching patients to licensed providers and partnering with health plans to expand access. Founded in 2019 and headquartered in New York, the privately held company operates across the United States.

Contact me