Senior Security Engineer, Data Infrastructure

Grow Therapy is on a mission to serve as the trusted partner for therapists growing their practice, and patients accessing high-quality care. Powered by technology, we are a three-sided marketplace that empowers providers, augments insurance payors, and serves patients. Following the mass increase in depression and anxiety, the need for accessibility is more important than ever. To make our vision for mental healthcare a reality, we’re building a team of entrepreneurs and mission-driven go-getters. Since launching in February 2021, we’ve empowered more than ten thousand therapists and hundreds of thousands of clients across the country and insurance landscape. We’ve raised more than $328Mm in funding, including our Series D, at a $3B valuation from Sequoia Capital, Transformation Capital, TCV, SignalFire, Menlo Ventures, Goldman Sachs Alternatives, and others. THE OPPORTUNITY We're looking for a Senior Security Engineer to own the data security infrastructure at Grow Therapy, the systems that determine how sensitive data is classified, protected, and safely governed across the company. Our customers trust us with some of the most sensitive data there is, and it's our responsibility to honor that trust by treating it with the highest standards of security. You'll be the hands-on technical owner of the infrastructure that makes that possible and the person who makes protecting that data the easy, default path for the rest of the company. Reporting into the Head of Security and partnering closely with Data, Engineering, and our Detection & Response team, this is a role that requires both building and strategizing: you'll ship the pipelines and services yourself and define what great data security looks like a year out, then make it real. Security sits within Grow's Internal Foundations pillar — the team building company-wide infrastructure to support safe AI adoption, so you'll be architecting the data-protection foundation that every other team, and every AI tool, builds on top of. WHAT YOU'LL BE DOING - Define what data security looks like a year from now — then build it. Own a clear, opinionated vision for Grow's data security infrastructure: where the biggest risks are, what "secure by default" means for sensitive data, and the roadmap to get there. - Make data classification executable. Build the automated classification and tagging pipelines that scan our production data models, infer sensitivity, and propagate those tags through data lineage — aligning with our Data Classification Policy so that every downstream system can act on classification automatically rather than guess. - Control how data is used internally. Build field-level dynamic masking, tokenization, and redaction — driven by classification tags — so that sensitive data is exposed only when there's a genuine need, and access is scoped, justified, and logged. Make masked-by-default the path of least resistance for the tools teams build on top of our data. - Secure the data path into AI tooling. We’re an AI forward organization. You'll own the security of the data connectors and pipelines feeding AI tools - including authentication, authorization, observability. Your role will be to ensure Grow can take advantage of new AI technologies safely and appropriately. - Build fast, safe, and scalable encryption pipelines. Design and ship the encryption infrastructure that protects our most sensitive data end to end — application-layer and field-level encryption, envelope encryption, key management — engineered to be fast and scalable enough that teams reach for it by default rather than around it. YOU'LL BE A GOOD FIT IF - You're a hands-on data infrastructure engineer. You're comfortable writing production code, designing data pipelines and services, and doing system design reviews — and you've built security or data infrastructure that real teams depend on. - You've worked deep in the data-security stack. You've built meaningfully across some combination of data classification, masking/tokenization, encryption and key management, and secure data access, and you can connect into a coherent system. - You can set direction and then execute on it. You're energized by a blank canvas: you can define what success looks like a year out, prioritize ruthlessly toward it, and inspire partner teams to support you in this goal. - You think in terms of risk reduction, not checkboxes. You instinctively reach for the highest-leverage control on the largest surface, and you'd rather make the secure path the default. - You're a clear, compelling communicator. You can explain data-security tradeoffs and risk to non-technical audiences — including executives and clinical stakeholders — with precision, empathy, and confidence. Employment Type: Full Time, Exempt Base Compensation: The base compensation range for this position is: - Hybrid Commitment: $182,000- $250,000 USD Annually - Fully Remote Commitment: $152,000–$208,000 USD Annually This role can be hybrid (onsite from our NYC, San Francisco, or Seattle hub location three days per week: Tuesday, Wednesday, Thursday) or fully remote. Both arrangements include travel 2–3 times per year (e.g., company and department offsites). The base compensation for this role will vary depending on several factors, including relevant experience, qualifications, and the candidate’s working location. Full Time Employee Benefits: - Health Benefits: Comprehensive medical, dental, vision, life, and disability coverage. - Grow for Grow: No cost access to therapy through the Grow platform (available to US employees) - Financial Wellness: Retirement savings programs and equity opportunities to help you invest in your future. - Flexible Time Off, Paid Holidays & Winter Break: Flexible time off, company paid holidays (which vary by country), and a full company wide Winter Break to rest and recharge - Parental Leave: Up to 18 weeks of paid parental leave to support you and your growing family and a new child stipend. - Mental Health Mornings/Afternoons: Dedicated weekly flexible time for self care, whether that's therapy, exercise, journaling, time with family, or simply taking a break. - Wellness & Development Stipend: Annual stipend to support your personal wellbeing and professional growth, from fitness and education to books and learning resources. - Commuter Benefits: Pre tax commuter benefits to support teammates working from one of our hub locations. - Home Office & Meals: Support for your home workspace plus meal benefits, with offerings tailored to both remote and hub based employees. - Additional Perks: A variety of wellbeing benefits, including wellness memberships, virtual care, pet insurance discounts (where available), and global travel assistance. Research shows that some groups hesitate to apply unless they meet every qualification. If you’re excited about this role but don’t check every box, we encourage you to apply. At Grow, we value diverse experiences, transferable skills, and the unique strengths each person brings. Grow Therapy is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Use of AI Tools: We use certain AI and automated tools to support recruitment. These tools help our team review applications, organize interviews, detect potential application integrity issues, and maintain interview records; they do not make final hiring decisions. Application Review: Ashby's AI-Assisted Application Review helps review application materials against role-specific criteria and may flag potential fraud or integrity issues for recruiter review. All advancement decisions are made by our human recruiting team after independent review. See Ashby's AI Bias Audit Report https://trust.ashbyhq.com/item/ai-bias-audit-report. Interview Recording: We use BrightHire to record interviews, supporting note-taking and consistency across candidates. Learn more https://help.brighthire.ai/en/articles/4484370-brighthire-for-candidates-faq. Interviews are confidential; you may ask your interviewer to stop recording anytime, or opt out in advance https://app.brighthire.ai/candidate-opt-out/kcrUeiitS5Khw5AcWW_jLg. Choosing not to be recorded will not, by itself, affect your candidacy. AI-Assisted Recruiter Screen: For select roles, BrightHire's AI features may help structure initial recruiter screens and organize interview notes. All responses are reviewed by our recruiting team; no hiring decisions are made by AI alone. State-specific notices: Depending on your location, you may have additional rights. Illinois: If AI analyzes a video interview, we'll provide notice, explain how it works and what it evaluates, and obtain consent beforehand. New York City: Where required, we'll provide at least 10 business days’ notice before using an automated employment decision tool and explain how to request an alternative process. Maryland: We do not use facial recognition to create facial templates during interviews unless required notice and written consent are obtained. Questions, accommodation requests, requests for an alternative selection process, objections to recording, or concerns about AI use? Contact talentops@growtherapy.com. We’re happy to help or offer an alternative way to participate.