Senior Enterprise Security Engineer

Harvey; San Francisco (CA); On-site; USD 220,000 - 330,000; Full time

Job summary

Harvey is seeking a security engineer to safeguard enterprise SaaS environments, manage eDiscovery and legal hold workflows, and strengthen integrations across the organization. You will partner with Legal, Compliance, and IT to uphold threat modeling and secure data flows.

Ideal candidates have 4+ years in security engineering, hands-on coding with Python/Go, and experience with IAM/OAuth standards, plus IaC tooling.

Qualifications

• Demonstrated experience securing enterprise SaaS environments, with API token management and cross-application data flow risk.
• Experience building or managing eDiscovery and legal hold programs, data preservation workflows, custodian management.
• Strong software engineering fundamentals with Python and/or Go, and IaC tooling (Terraform/Pulumi).
• Ability to identify risks in IT/business systems and communicate to stakeholders clearly.
• Familiarity with endpoint security for macOS/Windows and tools like Okta, Google Workspace, Salesforce, NetSuite.

Responsibilities

• Design, implement, and govern security controls for cross-application data flows and SaaS integrations.
• Build and operate Harvey's eDiscovery and legal hold infrastructure in collaboration with Legal and Compliance.
• Provide security oversight across the SaaS application lifecycle, including vendor onboarding and configuration review.
• Support endpoint security policies and vulnerability management across systems.
• Develop scripts and integrations to extend visibility and detect threats in enterprise apps.

Skills

SaaS security

eDiscovery programs

Python/Go coding

IaC tooling

OAuth/SAML/OIDC

Endpoint security

Risk communication

Security integrations

Tools

Purview

Vault

Relativity

Everlaw

Job description

Harvey is seeking a security engineer to safeguard enterprise SaaS environments, manage eDiscovery and legal hold workflows, and strengthen integrations across the organization. You will partner with Legal, Compliance, and IT to uphold threat modeling and secure data flows.

Ideal candidates have 4+ years in security engineering, hands-on coding with Python/Go, and experience with IAM/OAuth standards, plus IaC tooling.