Incident Handler
HarveyVisit Harvey website
Harvey is an AI platform for legal and professional-services organizations.
Distributed
About Harvey
Harvey provides agents and collaborative tools for legal work, including legal research, document analysis, secure workspaces, contract intelligence, and organization-level analytics.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead investigations of security incidents across cloud infrastructure, identity systems, corporate environments, and AI platforms. You will coordinate containment, improve detection and response processes, create playbooks, mentor responders, and ensure follow-up actions are completed.
Requirements
- 3+ years of experience in incident response, detection and response, security operations, threat detection, or related security engineering
- Experience investigating complex security incidents in cloud-native environments
- Understanding of attacker tactics, techniques, and procedures
- Experience with AWS, GCP, or Azure
- Knowledge of operating systems, networking, and identity systems
- Experience building security automation and tooling
- Python, Go, or similar scripting or software engineering skills
- Experience communicating incident status and risk to senior leadership
Responsibilities
- Build relationships with key employees across the organization
- Lead investigations of security incidents across cloud infrastructure, identity systems, corporate environments, and AI platforms
- Use, maintain, and contribute to an internally developed agentic SOC
- Work across technical and operational organizations to ship fixes and enforce policies
- Contribute to the Detection and Response roadmap, metrics, SLAs, threat modeling, and tabletop exercises
- Ensure incident follow-ups are meaningfully closed
- Mentor engineers and incident responders
- Build playbooks and operational standards
Benefits
- Equity