Senior Product Security Engineer — Build Secure AI Products

Harvey; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Harvey is seeking a Senior Software Engineer on the Product Security team to embed security into the product lifecycle. You will balance hands-on security work with cross-functional leadership to raise the bar across the company and safeguard customer data in a fast-growing AI-native environment.

The role emphasizes building a world-class security program, working with an engineering-first team, and mentoring engineers while driving secure baselines and security-first practices throughout

Qualifications

• 5+ years of product security experience.
• Experience remediating vulnerabilities incl. CVEs or bug bounties.
• Experience delivering production software.
• Ability to drive prioritization with cross-functional teams.
• Excellent communication translating security risks to business terms.

Responsibilities

• Lead critical security initiatives with Engineering, Product and Design.
• Build cross-functional partnerships and scalable processes.
• Define and implement product security standards.
• Incorporate secure design principles at all development stages.
• Identify potential threats and vulnerabilities in systems.
• Develop and implement security solutions for Harvey products.
• Review product features and code changes.
• Drive security-first principles across the company.
• Mentor engineers through code and design reviews.

Skills

Product security

Vulnerability remediation

Security metrics

Security leadership

Job description

Harvey is seeking a Senior Software Engineer on the Product Security team to embed security into the product lifecycle. You will balance hands-on security work with cross-functional leadership to raise the bar across the company and safeguard customer data in a fast-growing AI-native environment.

The role emphasizes building a world-class security program, working with an engineering-first team, and mentoring engineers while driving secure baselines and security-first practices throughout