SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 133,600 - 200,400 / annual
Harvey is an AI platform for legal and professional services, combining frontier agentic AI with enterprise-grade infrastructure and deep domain expertise. The company is scaling rapidly with strong product-market fit and world-class investor backing.
You will join Harvey's small, highly technical security team as an experienced Incident Response Handler, driving and ultimately leading incident response for security events. This is an individual contributor role with real latitude to define how Harvey approaches incident response at a critical juncture. The team is built on offensive security experience—most engineers come from red-team, pentesting, or incident-response backgrounds—and brings an attacker's mindset to detection and response.
Key responsibilities include:
- Leading investigations across cloud infrastructure, identity systems, corporate environments, and AI platforms during security incidents
- Building strong relationships with key employees across the organization to support incident response efforts
- Using, maintaining, and contributing to an internally developed agentic SOC fine-tuned to Harvey's threat environment
- Working cross-functionally with technical and operational teams to ensure fixes ship and policies are enforced
- Contributing to Harvey's Detection & Response roadmap, including metrics, SLAs, threat modeling, and tabletop exercises for critical business risks
- Ensuring incident follow-ups are meaningfully closed across teams
- Mentoring engineers and incident responders, building playbooks and operational standards, and raising the security bar company-wide
- Commanding incidents and coordinating containment to prevent recurrence
Harvey's culture emphasizes Decisiveness, Simplicity, and Job's Not Finished—moving fast on clear judgment, believing simplicity scales, and never being satisfied with the status quo.
REQUIREMENTS:
- 3+ years of experience in Incident Response, Detection & Response, Security Operations, Threat Detection, or related security engineering disciplines
- Experience participating in investigations and response efforts for complex security incidents in cloud-native environments
- Deep understanding of attacker tactics, techniques, and procedures (MITRE ATT&CK and modern threat actor tradecraft)
- Experience with one or more major cloud platforms (AWS, GCP, Azure), plus strong knowledge of operating systems, networking, and identity systems
- Experience building security automation and tooling, with strong scripting or software engineering skills in Python, Go, or similar languages
- Experience communicating incident status and risk to senior leadership
About Harvey
Legal / Compliance / Risk; AI / Data / Infrastructure — AI platform for legal and professional services work.
