Head of Security Engineering

Who are we and why should you join us? BetterHelp is on a mission to remove the traditional barriers to therapy and make mental health care more accessible to everyone. Founded in 2013, we are now the world’s largest online therapy service, providing affordable and convenient therapy across the globe. Our network of over 30,000 licensed therapists has helped millions of people take ownership of their mental health and change their lives forever. And we’re not stopping there – as the unmet need for mental health services continues to grow, BetterHelp is committed to being part of the solution. As the Head of Security at BetterHelp, you’ll join a diverse team of licensed clinicians, engineers, product pros, creatives, marketers, and business leaders who share a passion for expanding access to therapy. And as a mental health company, we take employee mental health just as seriously as we do our mission. We deeply invest in our team’s well-being and professional development, because we know that business and individual growth go hand-in-hand. At BetterHelp, you’ll carve your own path, make an immediate impact, and be challenged every day – with a supportive community behind you the whole way. What are we looking for? BetterHelp is seeking a highly technical Head of Security Engineering to lead our security strategy with a strong emphasis on offensive security and attacker mindset. This role will anchor our security organization in a red team–first approach, proactively identifying vulnerabilities and strengthening our defenses before they can be exploited. In addition to leading offensive security, you will provide oversight and strategic direction across Security Operations (blue team) and Application Security, ensuring a cohesive and effective security posture. This is a hands-on leadership role for someone who thrives in fast-moving environments and can balance deep technical work with broader organizational impact. What will you do? Lead BetterHelp’s security engineering strategy, with offensive security as the foundation Operate with a red team / attacker mindset, identifying vulnerabilities across applications, infrastructure, and internal systems Direct and evolve the company’s red team capabilities, including penetration testing, code review, and vulnerability discovery Provide oversight and guidance across: Partner closely with Engineering to embed security into the software development lifecycle (SDLC) Strengthen processes around vulnerability management, detection, and response Build and improve offensive security tooling and capabilities, complementing external programs like Bugcrowd Help reduce technical debt and improve system resilience through proactive security practices Identify and address emerging threats, including AI security risks Mentor and guide a strong team, setting a high bar for technical rigor and impact What will you NOT do? You will NOT worry about "runway", "cash left", or "how much time we have until the next round".