Head of Threat Detection & Incident Response

Harvey, Inc.; New York (NY); Hybrid; USD 280,000 - 385,000; Full time

Job summary

Harvey is seeking a Director of Detection and Response to build and lead the team that identifies threats, responds decisively to incidents, and turns learnings into stronger defenses. You will own the strategy, technical direction, and operational readiness across our production platform and corporate environment.

This is a technical leadership role requiring hands-on collaboration with the CISO and stakeholders across Engineering, IT, Legal, and Trust.

Qualifications

• Experience building and leading Detection and Response teams in a tech company.
• Strong incident response experience during serious security events.
• Deep technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft.

Responsibilities

• Build and lead the organization; hire and develop detection engineers, incident responders, and technical leaders; establish clear ownership and a culture of curiosity, sound judgment, and continuous learning. Own the roadmap, staffing plan, and investment decisions.
• Own incident response and crisis readiness; lead Harvey’s response to major security incidents, coordinating investigation, containment, recovery, and executive communication.
• Build detection as an engineering capability; set the technical direction for telemetry, detection pipelines, forensic tooling, and response automation across cloud, endpoint, identity, SaaS, and application environments.
• Focus defenses on meaningful threats; use threat intelligence, hunting, and attacker perspective to prioritize scenarios that matter to Harvey, including account compromise, data theft, insider risk, privileged‑access abuse, and abuse of AI‑enabled workflows.
• Make response a company capability; partner with Engineering, IT, Legal, Privacy, Communications, and Customer Trust on sensitive investigations and crisis decisions.
• Turn incidents into lasting improvements; drive blameless reviews and ensure corrective actions have owners, deadlines, and verified outcomes.

Skills

Detection & Response leadership

Incident response leadership

Security engineering

Cloud infrastructure

Threat hunting

Digital forensics

Automation

Job description

Harvey is seeking a Director of Detection and Response to build and lead the team that identifies threats, responds decisively to incidents, and turns learnings into stronger defenses. You will own the strategy, technical direction, and operational readiness across our production platform and corporate environment.

This is a technical leadership role requiring hands-on collaboration with the CISO and stakeholders across Engineering, IT, Legal, and Trust.