HeadwayNew York, NYBuilds and matures GRC program supporting audits (HITRUST, SOC 2, PCI-DSS, HIPAA), manages vendor risk, security training, and technical risk register. Requires 5+ years GRC experience and knowledge of compliance frameworks.
Bonus: you've worked in healthcare or healthtech and understand what HIPAA means in practice, not just in theory.
The expected base pay range for this position is $161,600 to $202,000 based on a variety of factors including qualifications, experience, and geographic location. In addition to base salary, this role may be eligible for an equity grant.
Benefits offered include:
Senior Vulnerability Management Engineer responsible for scanning, triaging, and remediating security vulnerabilities across cloud and on-premise infrastructure. Requires 5+ years in vulnerability management and expertise with Qualys, Nessus, CSPM, and SAST tools.
Senior Detection Engineer responds to security incidents, triages alerts, tunes runbooks, and builds automation for threat detection in federal environments. Requires 3-4 years IT experience, SOC background, and log analysis tools like ELK/Datadog.
Lead AWS and network security infrastructure, zero-trust initiatives, and cloud automation for enterprise environments. Requires strong AWS, networking, IAM, and scripting experience.
Senior Software Engineer architects scalable detection frameworks, integrates threat intelligence into automated security pipelines, and builds AI-driven security operations using Python, Java, and tools like Splunk and AWS. Requires 6+ years experience, bachelor's in CS/cybersecurity, and expertise in SIEMs, cloud security, and compliance.
Leads security GRC program, conducts enterprise risk assessments, manages compliance audits like SOC2/ISO 27001/TISAX, drives TPRM, and builds GRC infrastructure. Requires 6+ years in security compliance with hands-on audit and tooling experience.