SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 231,000 - 340,000 / annual
Harvey is an AI platform for legal and professional services, combining frontier agentic AI with enterprise-grade infrastructure and deep domain expertise. The company is scaling rapidly with strong product-market fit and world-class investor backing.
As a Staff Infrastructure Security Engineer, you will set the technical direction for secure-by-default infrastructure security across Harvey's platform. You'll establish patterns, standards, and guardrails that enable the broader engineering organization to build securely. Your responsibilities include:
- Incorporating secure design principles into cloud architecture
- Establishing reusable security patterns, standards, and guardrails for product and platform teams
- Developing isolation mechanisms (e.g., sandboxing) in collaboration with product engineering
- Reviewing security-critical configuration changes and acting as codeowner for security-critical cloud configurations (all infrastructure-as-code)
- Partnering with Engineering and Product teams to manage risks and vulnerabilities, translate security requirements into engineering investments, and define infrastructure security architecture and multi-quarter roadmaps
- Mentoring and developing other security engineers on the team, raising the overall technical bar
Harvey's customers—including some of the world's largest companies and their law firms—trust the platform with sensitive data. Security is foundational to the product, and this role offers the opportunity to shape the future of Harvey's security program from the ground up with an engineering-first mindset.
REQUIREMENTS:
- 8+ years of experience in Security Engineering and/or Software Engineering
- Demonstrated experience writing high-quality software, building production-grade infrastructure, and raising the security bar across engineering teams
- Strong fundamentals in networking, operating systems, and cryptographic protocols
- In-depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors
- Demonstrated ability to find weaknesses (e.g., privilege escalation) in real-world cloud environments
- Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud)
- Track record of driving cross-functional security initiatives and influencing engineering decisions across teams
- Experience setting security standards and best practices at organizational scale
BONUS:
- Familiarity with large-scale Infrastructure as Code (IaC) deployments
- Familiarity with Kubernetes Admission Controllers and policy enforcement
- Exposure to multi-cloud environments
- Note: No experience with generative AI or legal required
About Harvey
Legal / Compliance / Risk; AI / Data / Infrastructure — AI platform for legal and professional services work.
