SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 200,000 - 280,000 / annual
Harvey is an AI platform transforming legal and professional services by combining frontier agentic AI, enterprise-grade infrastructure, and deep domain expertise. The company, founded in 2022 and backed by world-class investors, is scaling rapidly and defining a new category in real time.
As an early member of Harvey's Security team, you will play a key role in laying the foundation for the security and privacy of the platform. Some of the world's largest companies and their law firms depend on Harvey to make sense of legal documents and automate legal work, making security and trustworthiness business enablers.
The security program is driven by collective offensive security experience: white-hat system penetration, real incident response, and learning from industry breaches. The team conducts regular pentests and red team exercises with external security firms.
Key responsibilities include:
- Collaborate with engineering teams to incorporate secure design principles into product architecture
- Review security-critical code and serve as codeowner for authentication, access control, and administration components
- Make well-scoped code contributions including unit/integration tests for security controls and implementation of security features
- Manage security aspects of the release process
- Audit existing codebase for vulnerabilities
- Improve static analysis and vulnerability management tooling
- Discover vulnerabilities through red team exercises
- Participate in and drive mitigation strategies during security incidents
You bring 4+ years of security-focused software engineering experience, ideally at or with small companies or hyper-growth startups. You demonstrate ability to write high-quality software, raise engineering team quality standards, and identify vulnerabilities (evidenced through CVEs, bug bounty awards, blog posts, or prior work). Bonus qualifications include open source contributions and cloud environment management experience (Azure, GCP, AWS).
Harvey values decisiveness, simplicity, and relentless execution. The team moves fast, takes ownership, and is deeply committed to the mission.
About Harvey
Legal / Compliance / Risk; AI / Data / Infrastructure — AI platform for legal and professional services work.
