Security Engineer, Spring Health
$120-150.3k
+ Stock options
Personalized mental healthcare
Open for applications
Personalized mental healthcare
1001+ employees
Open for applications
$120-150.3k
+ Stock options
1001+ employees
Company mission
To eliminate every barrier to mental health.
Role
Who you are
- 2+ years of professional security engineering or operations experience, including incident response
- Proficiency with Infrastructure as Code (Terraform, Terragrunt, CloudFormation, etc)
- Familiarity with cloud platforms (AWS, Azure, GCP) and their security features, best practices, and configurations
- Strong scripting skills in at least one language (Python preferred) to automate tasks, analyze data, and develop security tools
- Hands-on experience with incident response, detection engineering, security automation, and developing / automating incident response playbooks
- Knowledge of security principles, technologies, and best practices (encryption, authentication, firewalls, IDS/IPS, etc)
- Ability to manage multiple tasks/projects simultaneously and prioritize effectively based on risk and business impact
- Strong analytical and problem-solving skills with the ability to identify security risks and develop effective mitigation strategies
- Excellent communication and collaboration skills; able to explain technical concepts to non-technical audiences
- Familiarity with compliance standards such as HIPAA, GDPR, PCI-DSS, ISO 27001
Desirable
- Experience with threat hunting
- Security certifications (e.g., AWS Security Specialty, GCP Security Engineer, CISSP, GIAC)
- Experience leading incident postmortems or security tabletop exercises
- Contributions to open source security tools or projects
What the job involves
- We are looking for a Security Engineer II to be part of our Security Operations & Engineering (SecOps) team. SecOps is committed to proactively detect, respond to, simulate, and identify breach attempts and threat actors
- You will work with a team who oversee overall enterprise security systems implementation, lifecycle (S-SDLC), and support
- You will help improve the company’s ability to respond to threats through technology selection, internal product development and implementations with a heavy emphasis on automation of manual tasks and processes
- We’re looking for security engineers that can work collaboratively with our security, product, infrastructure architecture and engineering teams to implement secure solutions
- This role will report to the Manager of Security Operations and Engineering
- Design, build, maintain, tune and enhance the effectiveness of our security controls in multiple security domains including but not limited to:
- Cloud security
- Endpoint detection and response (EDR)
- Data loss prevention (DLP)
- Security Information and Event Management (SIEM)
- Identity and Access Management (IAM)
- Email security and phishing defenses
- Secure access service edge (SASE)
- Automate and optimize workflows to reduce manual effort in detection, analysis, and response
- Refine detection and alerting rules to enable identification and remediation of potential threats with actionable, high-quality signals
- Participate in on-call rotation, resolving most issues independently and escalating to Subject Matter Experts (SMEs) where necessary
- Collaborate with peer teams to secure applications, business software and services, and infrastructure
- Drive secure integrations for cloud applications and infrastructure
- Create and maintain documentation including knowledge base articles, incident response playbooks, and project documentation
- Lead post-incident reviews (RCAs) and contribute to lessons learned
- What success looks like in this role:
- Improved time to detect and resolve security issues
- Reduced number of vulnerabilities found in production
- Improved engagement scores between technology teams and security teams
- Security events are consistently monitored, investigated, and resolved in a timely way, with clear documentation that allows others to easily follow the lifecycle of the issue
- Projects and initiatives are delivered on schedule, driving measurable improvements in security maturity and reducing risk across the organization
- Security processes are proactively improved and automated to reduce manual work, increase efficiency, and strengthen detection and response capabilities
- Documentation of systems, incidents, and projects is accurate, current, and serves as a reliable resource for the team and stakeholders
- Communication with colleagues, stakeholders, and customers is timely, clear, and professional - ensuring that others feel informed and supported without needing to chase for updates
- Team meetings and cross-functional sessions are opportunities to lead, share expertise, and influence outcomes - success means being an active participant and sometimes facilitator
- Collaboration with engineering, product, infrastructure, and GRC teams results in trusted partnerships where security is seen as an enabler, not a blocker
- You are recognized by peers and stakeholders as a dependable contributor who consistently follows through on commitments and raises the bar for security practice at Spring Health
Our take
Large companies often provide employees with mental health services, but small businesses find it challenging to offer similar support. Additionally, existing support systems are usually generalized, failing to deliver the personalized mental healthcare that individuals need. To address this gap, Spring Health has developed AI-driven tools for employers to create tailored mental wellness plans for their employees, including treatment options, daily routines, and medication plans based on individual data.
Spring Health has recently expanded its services to the family and pediatric space through the acquisition of Weldon, offering mental wellness guidance to parents. This expansion includes chats with therapists, social workers, and parenting coaches, as well as group support with other parents and access to educational content. By focusing on personalized care, Spring Health aims to enhance mental wellness support for families alongside its existing employee services.
The behavioral health market is projected to grow to $242B by 2027. While many solutions prioritise fast access to therapy or meditation, Spring Health differentiates itself by emphasizing the right type of care for each individual. With substantial funding raised, Spring Health is well-positioned to continue its innovative approach to mental health services.
Freddie
Company Specialist at Welcome to the Jungle
Insights
77% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jul 2024
$100m
SERIES E
Apr 2023
$71m
LATE VC
Total funding: $465.1m
Company benefits
- Health, Dental, Vision benefits start on your first day at Spring Health. You and your dependents also receive an individual One Medical account which is valued at $199/year per user. HSA and FSA plans available
- A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents
- 10 allocated sick days per year
- Flexible paid time off in addition to 12 paid holidays throughout the year
- Access to Gympass, an on-demand virtual benefit that provides wellbeing coaching, and budget management
- Spring Renewal: When you hit your four-year Springaversary, you’ll be awarded a four week, fully paid, sabbatical leave to renew and recharge
- 4-4.5 months of fully paid parental leave
- Spring Health provides team members and their families with sponsored access to Bright Horizons® child care, back-up care, and elder care
- Access to fertility care support through Carrot, in addition to $4,000 reimbursement for related fertility expenses
- Our People team benchmarks all salaries using the Radford Global Compensation Database for technology and life sciences industries. Radford benchmarks salaries with 3,589 global firms, 6.5 million employees, and 98 countries across the globe. We do this to ensure all of our team members are paid equally and competitively
- On top of competitive and benchmarked salary, Spring Health offers incentive pay (based on role), and equity that begins vesting as we celebrate your first year with the company!
- Employer sponsored 401(k) match of up to 2% after 90 days of employment
- Flexible work arrangements: 66% of Spring Health team members work fully remote while 33% work in a hybrid model from our New York City offices
- Focus Fridays: no meetings, no distractions, just time for you to get work done
- Focus Weeks: In Spring 2023, we held our first ever Focus Week, we canceled all non-essential meetings, minimized distractions, and you, our team members, to dive into the key work that gets chopped up or deprioritized during the regular day-to-day. We saw a 36% jump in the average energized score after those five days of flow state work and are finalizing a plan for quarterly Focus Weeks for team members
- Up to $1,000 Professional Development Reimbursement per calendar year
- $200 per year donation matching to support your favorite causes
Company HQ
Flatiron District, New York, NY
Leadership
Adam Chekroud
(Co-Founder)Previously President of The Oxford Guild Business Society for 2 years and Researcher at FMRIB Centre - University of Oxford for 1 year.
April Koh
(Co-Founder & CEO)Previously Chief Product Officer & Co-Founder at Spylight for 1 year. Also worked in the Product Management Department at Shazam for 5 months.
Share this job
View 34 more jobs at Spring Health