Senior Product Security Engineer: Build a Secure Platform

Harvey, Inc.; New York (NY); On-site; USD 200,000 - 280,000; Full time

Benefits offered by this job

Equity plan

Health, dental, vision coverage

401k match up to 4%

Flexible PTO

Job summary

Harvey is transforming how legal and professional services operate with frontier AI and an enterprise-grade platform. We’re building a security-first product and need an engineer who can own security-critical areas of our codebase.

You’ll collaborate with a fast-growing team to embed secure design, review critical code, and lead remediation during incidents. This is a rare chance to help scale a generational company and shape our security posture.

Qualifications

• 4+ years’ experience in security-focused software engineering.
• Experience in a small company or hyper-growth startup.
• Proven ability to raise the quality bar of software engineering teams.
• Experience identifying vulnerabilities via CVEs, bug bounties, or prior work.

Responsibilities

• Closely work with engineering teams to incorporate secure design principles into engineering designs.
• Review security-critical code and act as Codeowner for security-critical parts of the product, including authentication, access control, and administration.
• Make well-scoped code contributions, e.g. add unit and integration tests for security controls, implement security features in collaboration with engineering teams.
• Manage the security aspects of our release process.
• Audit the existing codebase for vulnerabilities.
• Improve our static analysis and vulnerability management tooling.
• Discover vulnerabilities through red team exercises.
• Participate in and drive mitigation strategies during security related incident responses.

Skills

Security engineering

Startup experience

Software quality

Vulnerability discovery

Tools

Azure

AWS

GCP

Job description

Harvey is transforming how legal and professional services operate with frontier AI and an enterprise-grade platform. We’re building a security-first product and need an engineer who can own security-critical areas of our codebase.

You’ll collaborate with a fast-growing team to embed secure design, review critical code, and lead remediation during incidents. This is a rare chance to help scale a generational company and shape our security posture.