Staff Product Security Engineer — Build Secure AI Products

Harvey, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 220,000 - 330,000; Full time

Job summary

Harvey, Inc. is seeking a Staff Software Engineer for the Product Security team to embed security into our AI-native product.

You will drive the security roadmap, balance risk and velocity, and lead cross-functional efforts with Engineering, Product and Design to raise the bar on security across the company. You will mentor junior engineers, translate security risks into business terms for leadership, and architect secure-by-default tooling to ensure the secure path is the default for

Qualifications

• 8+ years of experience in product security, application security and/or security-focused software engineering.
• Track record of identifying and remediating software vulnerabilities through CVEs, bug bounty awards or published research.
• Experience independently delivering high-quality, production software end to end.
• Experience leading complex cross-functional security initiatives.
• Ability to handle prioritization and tradeoff discussions with senior leadership.
• Excellent communication and collaboration skills, particularly when translating security risks into business terms for non-security stakeholders.
• Excel at measuring and communicating security metrics and business risk reduction as it relates to product security investments.
• Experience mentoring both junior and senior engineers across engineering.
• Proactive approach to solving complex security challenges.
• Positive attitude and willingness to learn.
• Experience building security programs or practices at hyper-growth startups
• Cloud environments (Azure, GCP, AWS) with cloud-native security patterns
• Experience with AI/ML systems and emerging security considerations for LLM-based applications

Responsibilities

• Define and own the product security roadmap
• Establish risk based prioritization for product security features, balancing business velocity with customer trust.
• Partner with security leadership to drive organization maturity.
• Establish secure design principles for every stage of development, directly supporting Engineering, Product and Design teams.
• Raise the security bar across Harvey through scalable code and design reviews.
• Innovate new ways to Threat Model and surface security vulnerabilities at scale.
• Establish and evolve the security posture across Engineering by setting standards that scale with the company
• Architect secure-by-default tools and libraries to make the secure path the only path for developers at Harvey.
• Drive incident triage and translate vulnerability findings into end to end solutions.
• Directly mentor and lead junior engineers to up-level the Security organization.

Skills

Product security

Application security

Security engineering

Security leadership

Vulnerability remediation

Cloud security

AI/ML security

Job description

Harvey, Inc. is seeking a Staff Software Engineer for the Product Security team to embed security into our AI-native product.

You will drive the security roadmap, balance risk and velocity, and lead cross-functional efforts with Engineering, Product and Design to raise the bar on security across the company. You will mentor junior engineers, translate security risks into business terms for leadership, and architect secure-by-default tooling to ensure the secure path is the default for