Incident Response Specialist, Security Operations

Harvey; San Francisco (CA); On-site; USD 134,000 - 200,000; Full time

Job summary

Harvey in San Francisco is redefining incident response for frontier AI security. You will lead investigations across cloud infrastructure, identity systems, and our AI platforms, shaping how Harvey detects and responds to threats.

You will mentor engineers, build playbooks, and raise the security bar across the company, collaborating with product and engineering teams to ensure robust defenses and rapid containment.

Qualifications

• 3+ years in Incident Response or related security roles.
• Experience with cloud-native investigations.
• Understanding of MITRE ATT&CK and threat tradecraft.
• Experience with one or more cloud platforms (AWS/GCP/Azure).
• Experience with security automation and scripting (Python/Go).
• Ability to communicate incident status to senior leadership.

Responsibilities

• Build strong relationships with key employees across the organization.
• Participate in security incidents, leading investigations across cloud infrastructure, identity systems, corporate environments, and our AI platforms.
• Use, maintain, and contribute to an internally developed agentic SOC, fine tuned to Harvey’s threat environment.
• Work cross functionally across technical and operational orgs, ensuring the right PRs ship and best policies are enforced.
• Contribute to Harvey’s Detection & Response roadmap, including metrics, SLAs, threat modeling, and tabletop exercises for our most critical business risks.
• Work across teams to ensure incident follow ups are meaningfully closed.
• Mentor engineers and incident responders, build playbooks and operational standards, and raise the security bar across the company.

Skills

Incident Response

Security Operations

Threat Detection

MITRE ATT&CK

Cloud Platforms

Python/Go scripting

Leadership Communication

Job description

Harvey in San Francisco is redefining incident response for frontier AI security. You will lead investigations across cloud infrastructure, identity systems, and our AI platforms, shaping how Harvey detects and responds to threats.

You will mentor engineers, build playbooks, and raise the security bar across the company, collaborating with product and engineering teams to ensure robust defenses and rapid containment.