SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 133,600 - 200,400 / annual
Harvey is an AI platform for legal and professional services, combining frontier agentic AI with enterprise-grade infrastructure and deep domain expertise. The company is scaling rapidly with strong product-market fit and world-class investor backing.
You will join Harvey's small, highly technical security team as an experienced Incident Response Handler, driving incident response for security events across the organization. This is an individual contributor role with real latitude to define how Harvey approaches incident response at a critical juncture. The security team is built on offensive security experience—most engineers come from red-team, pentesting, or incident-response backgrounds—and brings an attacker's mindset to detection and response.
Key responsibilities include:
- Leading investigations across cloud infrastructure, identity systems, corporate environments, and AI platforms during security incidents
- Building strong relationships with key employees across the organization to support incident response efforts
- Using, maintaining, and contributing to an internally developed agentic SOC fine-tuned to Harvey's threat environment
- Working cross-functionally across technical and operational teams to ensure incident fixes ship and policies are enforced
- Contributing to Harvey's Detection & Response roadmap, including metrics, SLAs, threat modeling, and tabletop exercises for critical business risks
- Ensuring incident follow-ups are meaningfully closed across teams
- Mentoring engineers and incident responders, building playbooks and operational standards, and raising the security bar company-wide
- Communicating incident status and risk to senior leadership
Requirements:
- 3+ years of experience in Incident Response, Detection & Response, Security Operations, Threat Detection, or related security engineering disciplines
- Experience participating in investigations and response efforts for complex security incidents in cloud-native environments
- Deep understanding of attacker tactics, techniques, and procedures (MITRE ATT&CK and modern threat actor tradecraft)
- Experience with one or more major cloud platforms (AWS, GCP, Azure), plus strong knowledge of operating systems, networking, and identity systems
- Experience building security automation and tooling, with strong scripting or software engineering skills in Python, Go, or similar languages
- Experience communicating incident status and risk to senior leadership
About Harvey
Legal / Compliance / Risk; AI / Data / Infrastructure — AI platform for legal and professional services work.
