5 months ago
Base Salary
$188k - $282k/yr
Responsibilities
- Define and implement security standards across partner teams.
- Apply secure design principles throughout the development lifecycle.
- Own and review security-critical code, including authentication and access control.
- Build secure-by-default libraries and tooling for engineers.
- Drive mitigation during security-related incidents in partnership with Detection & Response and other teams.
- Mentor engineers and raise security standards through code reviews, design reviews, and technical guidance.
Requirements
- At least 5 years of experience in product security, application security, offensive security, and/or security-focused software engineering.
- A strong record of identifying and remediating software vulnerabilities, demonstrated through CVEs, bug bounty awards, published research, or prior work experience.
- Ability to collaborate on cross-functional security initiatives and influence engineering teams on security best practices.
- Experience educating engineers to improve security practices across a team.
- Strong programming skills and demonstrated experience writing high-quality production software.
- Strong communication and collaboration skills with technical and non-technical audiences.
- Track record of executing complex security projects and delivering measurable security improvements.
- Preferred experience building security programs or practices at hyper-growth startups.
- Preferred background with Azure, GCP, or AWS and cloud-native security patterns.
- Preferred experience with AI/ML systems and security considerations for LLM-based applications.
Tech Stack
Categories
About Harvey
Harvey builds domain-specific generative AI for legal and other professional services, delivered as an enterprise platform and APIs to automate contract analysis, due diligence, compliance, and litigation workflows. Founded in 2022 and headquartered in San Francisco, it sells to law firms and corporate legal departments on enterprise agreements; investors include Sequoia Capital and OpenAI. Customers include multiple Am Law 100 firms and Fortune 500 companies’ legal teams.