✦ Luna Orbit — Cybersecurity

Manager, Security Engineering

at Headway

📍 New York, New York, United States; San Francisco, California, United States; Seattle, Washington, United States Unknown Posted March 19, 2026
Type Not Specified
Experience mid
Exp. Years Not specified
Education Not specified
Category Cybersecurity

Headway is seeking a Security Engineer to lead application and product security initiatives, ensuring secure software development and vulnerability management across the organization.

  • Own security strategy
  • Develop security features
  • Conduct threat modeling
  • Perform secure code reviews
  • Manage vulnerabilities

The role involves implementing application security strategies, threat modeling, secure code reviews, and security testing within a SaaS healthcare environment, utilizing security tools and cross-functional collaboration.

The ideal candidate is a mid-level security engineer with experience in application security, threat modeling, and vulnerability management. They should have a strong understanding of secure software development practices and be capable of working cross-functionally to implement security strategies.

Application securitySecure software developmentThreat modelingSecure code reviewsSecurity testing
Vulnerability managementSecurity featuresSecurity strategySecurity visibilityProactive vulnerability management
SASTAutomated security testing tools
Application securitysecure software developmentthreat modelingsecure code reviewssecurity testingvulnerability managementproduct securitysoftware development lifecyclesecurity strategycross-functional collaboration
Application securitySecure software developmentThreat modelingSecure code reviewsSecurity testingSecurity featuresVulnerability managementProduct securitySoftware development lifecycleSecurity strategy
LeadershipCross-functional collaborationStrategic planningPeople developmentReportingPartneringSecurity awareness
Industry Healthcare IT, SaaS
Job Function Lead application and product security efforts to protect sensitive healthcare data
Role Subtype Security Engineer
Tech Domains Cybersecurity
application securitysecure software developmentthreat modelingsecure code reviewssecurity testingvulnerability managementproduct securitysoftware development lifecyclesecurity strategycross-functional collaborationsecurity visibilitysecurity featuressecurity programsecurity initiativessecurity toolssecure codingcross-functional

Lack of experience in application security, No understanding of secure software development, No experience with vulnerability management, Unwillingness to collaborate cross-functionally

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile