Staff Product Security Engineer @Harvey

Overview

Harvey is transforming how legal and professional services operate by combining AI, an enterprise-grade platform, and deep domain expertise. The role of Staff Product Security Engineer involves shaping security in their AI platform and owning critical aspects of product security.

Key Responsibilities

• Define and own the product security roadmap, prioritizing initiatives based on risk, business impact, and engineering org maturity.
• Establish and evolve security posture across the engineering organization, setting scalable standards.
• Partner with Product Engineering, Infrastructure, and Platform teams to incorporate secure design principles at every stage of development.
• Own and review security-critical code across key parts of the product, including authentication and access control.
• Architect secure-by-default libraries and tools.
• Drive mitigation strategies during security-related incident responses.
• Mentor engineers and raise the security bar through code reviews, design reviews, and technical guidance.

Requirements

• 8+ years of experience in product security, application security, offensive security, or security-focused software engineering.
• Track record of identifying and remediating software vulnerabilities.
• Experience leading complex cross-functional security initiatives and influencing teams without direct authority.
• Ability to mentor senior engineers and develop security talent within an organization.
• Strong programming skills demonstrated through production software.
• Excellent communication and collaboration skills.

Nice to Have: Experience building security programs at hyper-growth startups, background in cloud environments (Azure, GCP, AWS), experience with AI/ML systems and emerging security considerations for LLM-based applications.

Benefits

Compensation ranges from $220,000 to $330,000.

Location

Remote

How to Apply

Please apply through the direct application process on the Harvey website.

Deadline

No specific deadline mentioned.