Detection & Response Engineer (Offensive Security Minded) at Harvey
body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; line-height: 1.6; color: #333; }
h1 { color: #2c3e50; margin-top: 2em; margin-bottom: 0.5em; font-size: 1.8em; }
h2 { color: #34495e; margin-top: 1.5em; margin-bottom: 0.5em; font-size: 1.4em; }
p { margin-bottom: 1em; }
ul { list-style-type: disc; margin-left: 20px; margin-bottom: 1em; }
ul li { margin-bottom: 0.5em; }
a { color: #3498db; text-decoration: none; }
a:hover { text-decoration: underline; }
strong { font-weight: bold; }
Join Harvey: Pioneering the Future of Professional Services with AI
At Harvey, we're not just building software; we're redefining an entire industry. By fusing cutting-edge agentic AI with an enterprise-grade platform and unparalleled domain expertise, we are fundamentally reshaping how critical knowledge work is performed globally. This is a rare opportunity to be at the forefront of a generational company at a true inflection point.
With 1500+ customers in 60+ countries, strong product-market fit, and world-class investor backing, we’re scaling rapidly and actively defining a new category. The challenges are ambitious, our standards are exceptionally high, and the potential for personal, professional, and financial growth is unmatched.
Our team thrives on speed, ownership, and an unwavering commitment to our mission. We operate with intensity, remain deeply connected to our customers, and constantly push each other for excellence. Our core values—Decisiveness, Simplicity, and Job's Not Finished—guide everything we do: acting quickly with clear judgment, prioritizing scalable simplicity, and never settling for the status quo. If you’re driven to do the best work of your career alongside equally ambitious individuals, we invite you to build with us. The future of professional services is being written at Harvey, and we’re just getting started.
The Mission: Securing the Future of AI-Powered Professional Services
Some of the world’s largest companies and their leading law firms rely on Harvey’s transformative AI capabilities to deliver world-class client services with unprecedented scale and efficiency. Our platform empowers high-performing professionals to master deep domain knowledge faster, grasp the big picture, and conquer complex challenges in record time.
The trust of our customers is our most valuable asset and a fundamental business enabler. They depend on us to deliver an inherently secure, trustworthy, and compliant platform. This is where you come in.
We are searching for an exceptional offensive security-minded blue teamer to proactively identify, prioritize, and mitigate all threats against Harvey. Your deep offensive security expertise will be critical in shaping our defenses, developing sophisticated threat models for our infrastructure, and relentlessly pursuing security leads. You’ll have a unique opportunity to significantly enhance your Software Engineering and System Design skills as you contribute to our state-of-the-art agentic threat detection platform built on ClickHouse.
As an early and pivotal member of our Security Detection and Response team, you will be instrumental in laying the foundation and shaping the future of our entire Detection and Response program. We are a small, highly effective team with an extremely high bar for our work.
Our security program is intrinsically driven by our collective offensive security experience: breaking into systems (ethically), responding to real-world incidents, and learning from historical data breaches. We regularly engage in rigorous pentests and red team exercises with external security firms. Crucially, we are all active software engineers, contributing code daily, and approaching every security challenge with an inherent engineering-first mindset.
Your Impact: What You'll Do
Forge strong partnerships and build crucial relationships with key employees across the entire organization.
Leverage your offensive security expertise to develop plausible threat scenarios and pinpoint critical opportunities for detection.
Rigorously assess existing logs for gaps and implement additional, robust logging solutions as needed.
Architect and build sophisticated data pipelines capable of handling increasing volumes of security telemetry, significantly enriching our observability.
Lead critical incident response efforts, ensuring rapid and effective containment, eradication, and recovery.
Develop and continuously refine advanced detection rules, establishing a collaborative process for maintaining their efficacy with other D&R Engineers.
Actively participate in table-top exercises and red team engagements to rigorously evaluate the effectiveness of our security posture and detections.
What You'll Bring
Demonstrated ability to uncover and exploit weaknesses (e.g., privilege escalation) within real-world corporate networks, cloud environments, or applications.
Hands-on, proven experience responding to complex security incidents.
A strong, foundational understanding of computer networks, operating systems, and cryptographic protocols.
4+ years of experience in Security, Software Engineering, Site Reliability Engineering, or closely related disciplines.
Bonus Points If You Have
Experience thriving in a fast-paced environment at a small company, a smaller independent division within a larger organization, or a hyper-growth startup.
Practical experience with ClickHouse or similar high-performance data warehouses.
Professional red team experience.
Experience acting as an incident commander, adeptly managing security incidents or other critical disasters.
Compensation
$188,000 - $282,000
Applicant Privacy Notice
Depending on your location, an Applicant Privacy Notice may apply to you. You can find all of our Applicant Privacy Notices [here].
#LI-KV1
Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing [email protected]