Staff Product Security Engineer

Harvey is an AI platform for legal and professional-services organizations.

Series F+Recently funded
Distributed
About Harvey

Harvey provides agents and collaborative tools for legal work, including legal research, document analysis, secure workspaces, contract intelligence, and organization-level analytics.

View jobs by Harvey

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will define the product security roadmap and establish scalable secure-design practices, reviews, tools, and libraries. You will identify and resolve vulnerabilities, lead incident triage, assess security risk, partner across functions, and mentor engineers.

Requirements

  • 8+ years of product security, application security, or security-focused software engineering experience
  • Track record of identifying and remediating software vulnerabilities through CVEs, bug bounty awards, or published research
  • Experience delivering production software end to end
  • Experience leading cross-functional security initiatives
  • Ability to manage prioritization and tradeoffs with senior leadership
  • Ability to translate security risk into business terms
  • Experience measuring and communicating security metrics and business-risk reduction
  • Experience mentoring junior and senior engineers
  • Experience building security programs or practices at hyper-growth startups
  • Cloud security experience with Azure, GCP, or AWS
  • Experience with AI or ML systems and LLM application security

Responsibilities

  • Define and own the product security roadmap
  • Prioritize product security features based on risk
  • Partner with security leadership to improve organizational maturity
  • Establish secure design principles across development
  • Conduct scalable code and design reviews
  • Develop threat-modeling approaches and identify vulnerabilities
  • Set scalable engineering security standards
  • Architect secure-by-default tools and libraries
  • Drive incident triage and resolve vulnerability findings
  • Mentor and lead junior engineers

Benefits

  • Equity