Incident Response Specialist - Security Operations

Harvey, Inc.; San Francisco (CA); On-site; USD 134,000 - 200,000; Full time

Job summary

Harvey, Inc. in San Francisco is seeking an experienced Incident Response Handler to lead incident response for security events across cloud infrastructure, identity systems, corporate environments, and our AI platforms.

You will mentor engineers, develop playbooks, and help shape Harvey's Detection & Response program with an attacker’s mindset. This role offers the opportunity to influence security at a cutting-edge AI company.

Qualifications

• 3+ years of experience in Incident Response, Detection & Response, Security Operations, Threat Detection, or related security engineering disciplines.

Responsibilities

• Build relationships across the organization to coordinate security efforts.
• Lead investigations across cloud infrastructure, identity systems, and AI platforms.
• Maintain and contribute to an agentic SOC tailored to Harvey’s threat environment.
• Collaborate across technical and operations teams to ensure PRs and policies are enacted.
• Contribute to the Detection & Response roadmap with metrics, SLAs, and tabletop exercises.
• Mentor engineers and responders; build playbooks and raise security standards.

Skills

Incident Response

Cloud security

MITRE ATT&CK

Cloud platforms (AWS/GCP/Azure)

Scripting (Python/Go)

Executive communication

Job description

Harvey, Inc. in San Francisco is seeking an experienced Incident Response Handler to lead incident response for security events across cloud infrastructure, identity systems, corporate environments, and our AI platforms.

You will mentor engineers, develop playbooks, and help shape Harvey's Detection & Response program with an attacker’s mindset. This role offers the opportunity to influence security at a cutting-edge AI company.