Note: The job is a remote job and is open to candidates in USA. BetterHelp is on a mission to remove barriers to therapy and make mental health care accessible to everyone. As the Head of Security Engineering, you will lead the security strategy with a focus on offensive security, identifying vulnerabilities and strengthening defenses across the organization.
Responsibilities
- Lead BetterHelp’s security engineering strategy, with offensive security as the foundation
- Operate with a red team / attacker mindset, identifying vulnerabilities across applications, infrastructure, and internal systems
- Direct and evolve the company’s red team capabilities, including penetration testing, code review, and vulnerability discovery
- Provide oversight and guidance across:
- Partner closely with Engineering to embed security into the software development lifecycle (SDLC)
- Strengthen processes around vulnerability management, detection, and response
- Build and improve offensive security tooling and capabilities, complementing external programs like Bugcrowd
- Help reduce technical debt and improve system resilience through proactive security practices
- Identify and address emerging threats, including AI security risks
- Mentor and guide a strong team, setting a high bar for technical rigor and impact
Skills
- 5+ years of security leadership experience
- 10+ years of experience in security engineering
- Strong background in offensive security (red team, penetration testing, or bug bounty)
- Deep understanding of how modern systems are attacked, and how to defend against them
- Experience working across or leading Red team, Blue team / SecOps, or Application Security
- Experience setting strategy, managing roadmaps, and delivering measurable security outcomes across multiple teams
- Ability to operate both strategically and hands-on
- Experience working in fast-paced environments with frequent releases
- Strong communication skills with both technical and non-technical stakeholders
- Experience with AI/ML security or emerging attack vectors
- Experience working with PHI/PII
- Experience operating in environments with high regulatory, privacy, or customer trust requirements
- Experience building and operating security programs for large-scale cloud, distributed systems, or consumer platforms
- Experience partnering with GRC teams
Benefits
- Remote work with regular in-person bonding experiences sponsored by the company
- Holistic perks program (including free therapy, employee wellness, and more)
- Excellent health, dental, and vision coverage
- 401k benefits with employer matching contribution
- Any piece of hardware or software that will make you happy and productive
- An awesome community of co-workers
- Travel expenses are covered and reasonable accommodations are made for those under unique circumstances who cannot travel
Company Overview