Senior Product Security Engineer — AI Platform

Harvey; California (MO); On-site; USD 220,000 - 330,000; Full time

Job summary

Harvey is seeking a Staff Software Engineer on the Product Security team to help shape security across our AI platform. You’ll own the security roadmap, review critical code, and mentor engineers while collaborating with product and infrastructure teams.

The role emphasizes balancing hands‑on development with leadership, building secure‑by‑default libraries, and driving incident response. Competitive compensation reflects experience and location.

Qualifications

• 8+ years of experience in product security, application security, offensive security, and/or security‑focused software engineering.
• Track record of identifying and remediating software vulnerabilities, demonstrated via CVEs, bug bounties, or prior work.
• Experience leading cross‑functional security initiatives and influencing engineering teams without direct authority.

Responsibilities

• Define and own the product security roadmap, prioritizing initiatives based on risk, business impact, and engineering maturity.
• Establish and evolve security posture across the engineering org with scalable standards.
• Partner with Product Engineering, Infrastructure, and Platform teams to embed secure design principles.
• Own and review security‑critical code across key parts of the product, including authentication and access control.
• Architect secure‑by‑default libraries and tools to make secure paths easy for developers.
• Drive mitigation during security incidents and coordinate cross‑functional responses.
• Mentor engineers and raise security standards through reviews and guidance.

Skills

Product security

Application security

Mentoring engineers

Secure software development

Cross-functional leadership

Tools

Penetration testing

Code review

Security tooling

Job description

Harvey is seeking a Staff Software Engineer on the Product Security team to help shape security across our AI platform. You’ll own the security roadmap, review critical code, and mentor engineers while collaborating with product and infrastructure teams.

The role emphasizes balancing hands‑on development with leadership, building secure‑by‑default libraries, and driving incident response. Competitive compensation reflects experience and location.