Enterprise Security Engineer — SaaS & eDiscovery

Harvey, Inc.; New York (NY); Hybrid; USD 220,000 - 330,000; Full time

Benefits offered by this job

Equal opportunity employer

Accommodations on request via accoms@h

Job summary

Harvey, Inc. is seeking a security engineer to join its corporate security function at a pivotal point in scaling.

The role focuses on securing enterprise SaaS environments, API integrations, and eDiscovery workflows while partnering with Legal and Compliance to meet litigation readiness requirements. The candidate will design controls for cross-application data flows, automate posture monitoring, and contribute to endpoint security and threat detection initiatives in a fast-growing,

Qualifications

• Demonstrated experience securing enterprise SaaS environments, including integration security, API token management, OAuth governance, and cross-application data flow risk.
• Experience building or managing eDiscovery and legal hold programs, including data preservation workflows and custodian management.
• Strong software engineering fundamentals with Python and/or Go, and experience with infrastructure-as-code tooling (Terraform/Pulumi).
• Ability to identify risks and communicate risk to engineering, legal, and executives.

Responsibilities

• Design, implement, and govern security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms.
• Own the security review lifecycle for new integrations and automate posture monitoring to catch drift early.
• Continue to build and operate Harvey's legal hold infrastructure, including data preservation workflows and custodian management.
• Partner with Legal and Compliance to meet litigation readiness requirements across our collaboration and productivity stack.
• Provide security oversight across the SaaS application lifecycle — vendor onboarding assessments and configuration reviews.
• Support endpoint security policies and vulnerability management with telemetry feeding detection and response workflows.
• Develop scripts and integrations to extend visibility across corporate systems in collaboration with the Detection & Response team.

Skills

Security engineering

SaaS security

API security

Python

Go

Tools

Purview

Vault

Relativity

Everlaw

Okta

Google Workspace

Salesforce

Workday

NetSuite

Microsoft Entra/Azure/Intune

JAMF

Tines

Terraform

Pulumi

Job description

Harvey, Inc. is seeking a security engineer to join its corporate security function at a pivotal point in scaling.

The role focuses on securing enterprise SaaS environments, API integrations, and eDiscovery workflows while partnering with Legal and Compliance to meet litigation readiness requirements. The candidate will design controls for cross-application data flows, automate posture monitoring, and contribute to endpoint security and threat detection initiatives in a fast-growing,