SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 220,000 - 330,000 / annual
Harvey is an AI platform transforming legal and professional services through frontier agentic AI, enterprise-grade infrastructure, and deep domain expertise. Founded in 2022 and headquartered in San Francisco, the company is at a critical inflection point with strong product-market fit and world-class investor backing.
As a Senior Software Engineer on the Security Engineering team, you will design, build, and operate Harvey's foundational security services that every engineer depends on: identity and access management, secrets and privileged access management, and tooling that makes the secure path the fast path. You'll own these systems end-to-end—from architecture and implementation through production operation and reliability.
Key responsibilities include:
- Design and operate core security services: authentication, authorization, access governance, secrets management, and privileged access across workforce, infrastructure, and production environments
- Own Harvey's identity infrastructure end-to-end, including SSO, SCIM, and fine-grained authorization for enterprise customers
- Build secure-by-default libraries, paved-road abstractions, and self-service tooling so engineering teams can identify, remediate, and prevent security issues independently
- Take systems from greenfield to production-grade: define architecture, ship, instrument, and own reliability
- Contribute to incident response and drive technical mitigation when security issues surface
- Raise the security bar across engineering through design reviews, code reviews, and technical mentorship
You bring 5+ years of software engineering experience with a proven track record of shipping and operating production services. You have hands-on experience building security infrastructure (IAM, authentication/authorization, secrets management, or privileged access) and working knowledge of common vulnerability classes. You're a strong programmer willing to work across the stack and unfamiliar domains, with fluency building and maintaining production services using agentic coding tools like Claude Code or Codex. You have experience with cloud infrastructure (Azure, GCP, AWS) and modern distributed system patterns, and a demonstrated ability to turn security requirements into scalable engineering solutions rather than manual processes.
Security at Harvey is an engineering discipline, not a gatekeeper function. The program is risk-informed, investing where actual exposure to customer data is greatest. You'll work with a team that moves fast, takes ownership, and is deeply committed to the mission—operating with intensity, staying close to customers, and pushing each other for excellence.
About Harvey
Legal / Compliance / Risk; AI / Data / Infrastructure — AI platform for legal and professional services work.
