SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 231,000 - 340,000 / annual
Harvey is an AI platform transforming legal and professional services by combining frontier agentic AI, enterprise-grade infrastructure, and deep domain expertise. The company has strong product-market fit, world-class investor backing, and is scaling rapidly in a newly defined category.
As a Staff Infrastructure Security Engineer, you will set the technical direction for secure-by-default infrastructure security across Harvey's platform. You'll establish patterns, standards, and guardrails that enable product and platform teams to build securely without friction. Key responsibilities include:
- Incorporating secure design principles into cloud architecture and designing isolation mechanisms (e.g., sandboxing) in collaboration with product engineering
- Establishing reusable security patterns, standards, and guardrails that enable teams to build securely by default
- Reviewing security-critical configuration changes and acting as codeowner for security-critical parts of cloud configurations (all infrastructure-as-code)
- Partnering with Engineering and Product teams to manage risks and vulnerabilities in the cloud environment, translate security requirements into concrete engineering investments, and define infrastructure security architecture and multi-quarter roadmaps
- Mentoring and developing other security engineers on the team, raising the overall technical bar
Security is foundational to Harvey's mission—customers trust the platform with highly sensitive legal and professional data. You'll work with an engineering-first security mindset, focused on enabling rapid, independent movement across research and engineering teams while maintaining robust security posture. This is an opportunity to shape the future of security at Harvey from the ground up during a critical growth phase.
REQUIREMENTS:
- 8+ years of experience in Security Engineering and/or Software Engineering
- Demonstrated experience writing high-quality software, building production-grade infrastructure, and raising the security bar across engineering teams
- Strong fundamentals in networking, operating systems, and cryptographic protocols
- In-depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors
- Demonstrated ability to find weaknesses (e.g., privilege escalation) in real-world cloud environments
- Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud)
- Track record of driving cross-functional security initiatives and influencing engineering decisions across teams
- Experience setting security standards and best practices at an organizational scale
BONUS:
- Familiarity with large-scale Infrastructure as Code (IaC) deployments
- Familiarity with Kubernetes Admission Controllers and policy enforcement
- Exposure to multi-cloud environments
- (No experience with generative AI or legal required)
About Harvey
Legal / Compliance / Risk; AI / Data / Infrastructure — AI platform for legal and professional services work.
