Staff Product Security Engineer - Build Secure-by-Default

Speedrun Talent Network; San Francisco (CA); On-site; USD 220,000 - 330,000; Full time

Job summary

Harvey is hiring a Staff Software Engineer on the Product Security team to build security directly into the product. You will drive high‑leverage security initiatives, balance hands‑on work with cross‑functional leadership, and mentor junior engineers.

You’ll establish secure‑by‑default design principles, lead incident response, and scale security practices across Engineering, Product and Design at a fast‑growing AI‑native company.

Qualifications

• 8+ years of experience in product security, application security and/or security-focused software engineering.
• Experience identifying and remediating software vulnerabilities through CVEs, bug bounty awards or published research.
• Experience delivering high-quality, production software end to end.

Responsibilities

• Define and own the product security roadmap.
• Establish risk-based prioritization for product security features.
• Partner with security leadership to drive organization maturity.
• Establish secure design principles at every development stage.
• Raise the security bar across Harvey through code/design reviews.
• Innovate threat modeling and surface vulnerabilities at scale.
• Establish and evolve security posture across Engineering.
• Architect secure-by-default tools and libraries for developers.

Skills

Product security

Vulnerability remediation

End-to-end delivery

Cross-functional leadership

Stakeholder prioritization

Security metrics

Mentoring engineers

Proactive security

Security program leadership

Tools

Azure

AWS

GCP

Job description

Harvey is hiring a Staff Software Engineer on the Product Security team to build security directly into the product. You will drive high‑leverage security initiatives, balance hands‑on work with cross‑functional leadership, and mentor junior engineers.

You’ll establish secure‑by‑default design principles, lead incident response, and scale security practices across Engineering, Product and Design at a fast‑growing AI‑native company.