Join Harvey: Staff Infrastructure Security Enginee
At Harvey, we're not just building software; we're redefining how critical knowledge work is done across legal and professional services. By seamlessly integrating frontier agentic AI with an enterprise-grade platform, we're empowering the world's largest companies and their law firms to deliver unparalleled client services with unprecedented scale and efficiency. This is your chance to be part of a generational company at a pivotal moment – with strong product-market fit, world-class investor support, and a mission to define a new category in real-time.
We're a team that moves fast, takes ownership, and is deeply committed to our mission. Our values—Decisiveness, Simplicity, and Job's Not Finished—guide everything we do. We act quickly, prioritize scalable solutions, and relentlessly push for excellence. If you're driven to do the best work of your career alongside equally ambitious individuals, we invite you to build the future with us.
The Impact You'll Make: Staff Infrastructure Security Enginee
Security isn't just a feature at Harvey; it's the bedrock of our platform. Our customers entrust us with their most sensitive data, and we consider that responsibility sacred. As a Staff Infrastructure Security Engineer, you won't just maintain security—you'll architect it. This is a unique opportunity to shape the foundational security posture of a rapidly growing AI enterprise, influencing product development and setting the technical direction for secure-by-default infrastructure across our entire platform.
You’ll be instrumental in designing and implementing processes and technologies that enforce least privilege, isolate critical components, minimize attack surface, and establish robust layers of tenant isolation within our multi-tenant SaaS offering. With an engineering-first mindset, you’ll create frameworks and repeatable patterns, enabling our research and engineering teams to innovate rapidly without compromising security. This is your chance to get in at the ground floor of our evolving security program and leave an indelible mark on how security is built and scaled at Harvey.
What You'll Delive
Architect secure design principles directly into our cloud infrastructure, ensuring security is baked in from the ground up. Proactively manage and mitigate risks and vulnerabilities across our complex Cloud environment. Elevate the team's capabilities by mentoring and developing other security engineers, raising the overall technical bar across the organization. What You Bring 8+ years of dedicated experience in Security Engineering and/or high-impact Software Engineering roles. (No prior experience with generative AI or legal domains is required.) Bonus Points Familiarity with large-scale Infrastructure as Code (IaC) deployments and automation. Compensation Range Applicant Privacy Notice #LI-NP1 Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing [email protected]
Pioneer reusable security patterns, standards, and guardrails that empower product and platform teams to build securely by default.
Collaborate closely with product engineering teams to develop advanced isolation mechanisms, including sophisticated sandboxing techniques.
Serve as Codeowner for security-critical cloud configurations, reviewing and approving changes in our 100% Infrastructure as Code (IaC) environment.
Partner strategically with Engineering and Product teams to:
Translate evolving security requirements into concrete, actionable engineering investments and roadmaps.
Define the multi-quarter vision and architecture for our infrastructure security.
A proven track record of writing high-quality, production-grade software, building robust infrastructure, and significantly raising the security bar across engineering teams.
Deep, demonstrable fundamentals in networking, operating systems, and cryptographic protocols.
In-depth, hands-on knowledge of Kubernetes, including common misconfigurations, privilege escalation vectors, and securing containerized environments.
Demonstrated ability to proactively identify and exploit weaknesses (e.g., privilege escalation paths) in real-world cloud environments.
Extensive experience applying advanced security best practices within major cloud environments (AWS, Azure, or Google Cloud).
A history of successfully driving cross-functional security initiatives and influencing critical engineering decisions across diverse teams.
Experience in setting and enforcing security standards and best practices at an organizational scale.
Exposure to Kubernetes Admission Controllers and advanced policy enforcement strategies.
Experience navigating and securing multi-cloud environments.
$231,000 - $340,000 USD
Depending on your location, an Applicant Privacy Notice may apply to you. You can find all of our Applicant Privacy Notices here.