Senior Product Security Engineer - Build Secure Systems

AI Chopping Block; New York (NY); On-site; USD 200,000 - 280,000; Full time

Benefits offered by this job

Health, dental and vision

401k match up to 4%

Flexible PTO

Job summary

Harvey in New York seeks an experienced security-focused software engineer to join our early security team. You will help lay the foundation for security and privacy across our products, working with engineering to implement secure design and defense in depth.

You'll own code security, run tests, review critical components, and help respond to incidents, red team exercises, and vulnerability management. We value decisiveness, simplicity, and speed.

Qualifications

• 4+ years’ experience in security-focused software engineering.
• Experience working at or with a small company or a hyper-growth startup.
• Demonstrated experience writing high-quality software and raising the quality bar of software engineering teams.
• Demonstrated ability to identify vulnerabilities in software, e.g. through CVEs, bug bounty awards, blog posts, and prior work experience.

Responsibilities

• Closely work with engineering teams to incorporate secure design principles into engineering designs.
• Review security-critical code and act as Codeowner for security-critical parts of the product, including authentication, access control, and administration.
• Make well-scoped code contributions, e.g. add unit and integration tests for security controls, implement security features in collaboration with engineering teams.
• Manage the security aspects of our release process.
• Audit the existing codebase for vulnerabilities.
• Improve our static analysis and vulnerability management tooling.
• Discover vulnerabilities through red team exercises.
• Participate in and drive mitigation strategies during security related incident responses.

Skills

Security-focused software

Startup experience

Quality-focused coding

Vulnerabilities identification

Tools

Code review

Job description

Harvey in New York seeks an experienced security-focused software engineer to join our early security team. You will help lay the foundation for security and privacy across our products, working with engineering to implement secure design and defense in depth.

You'll own code security, run tests, review critical components, and help respond to incidents, red team exercises, and vulnerability management. We value decisiveness, simplicity, and speed.