Staff Corporate Security Engineer, Harvey
$220-330k
+ Offers Equity + Offers Bonus
3+ days a week in office
Domain-specific AI for legal and professional services
Be an early applicant
Domain-specific AI for legal and professional services
501-1000 employees
Be an early applicant
$220-330k
+ Offers Equity + Offers Bonus
3+ days a week in office
501-1000 employees
Company mission
To help professionals develop expertise, faster.
Role
Who you are
- Demonstrated experience securing enterprise SaaS environments, including integration security, API token management, OAuth governance, and cross-application data flow risk — with working knowledge of authentication/authorization standards (SAML, OIDC, SCIM, X.509) and the ability to debug real-world integration failures
- Experience building or managing eDiscovery and legal hold programs, including data preservation workflows, custodian management, and coordination with Legal and outside counsel. Familiarity with tools such as Purview, Vault, Relativity, Everlaw, or similar platforms is a plus
- Strong software engineering fundamentals with proficiency in Python and/or Go, including building integrations against SaaS APIs (not just configuring through consoles), and experience with infrastructure-as-code tooling such as Terraform and/or Pulumi for managing security configurations in a repeatable, auditable way
- Ability to identify risks and vulnerabilities in IT and business systems and communicate that risk clearly to stakeholders across engineering, legal, and executive audiences
- Familiarity with endpoint security for macOS and Windows environments, and experience with tools such as Okta, Google Workspace, Salesforce, Workday, NetSuite, Microsoft Entra/Azure/Intune, JAMF, Tines, or similar platforms
- 4+ years of experience in security engineering, corporate engineering, IT, or a related program management function with a security focus. Experience with generative AI or the legal industry is not required — but genuine curiosity about both will serve you well here
What the job involves
- Some of the world's largest companies and their law firms use Harvey's AI to deliver world-class client services at unprecedented scale, entrusting Harvey with their most sensitive documents in the process
- This role joins Harvey's corporate security function, which secures the company's IT and business systems as Harvey grows rapidly, balancing risk with user experience while validating every assumption through threat modeling and real-world testing rather than relying on best practice alone
- It is a strong fit for someone at the intersection of security engineering and enterprise systems- someone who understands how data flows between SaaS applications, can pinpoint where security breaks down in complex integrations, and knows how to build controls that scale
- Experience with eDiscovery workflows and legal holds is a meaningful differentiator given the nature of Harvey's customer base
- Enterprise Integrations & SaaS Security: Design, implement, and govern security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms
- Own the security review lifecycle for new integrations and automate posture monitoring to catch drift early
- EDiscovery & Legal Hold Program: Continue to build and operate Harvey's legal hold infrastructure, including data preservation, collection workflows, and custodian management
- Partner with Legal and Compliance to meet litigation readiness requirements across our collaboration and productivity stack
- IT & Business Systems Partnership: Provide security oversight across the SaaS application lifecycle — vendor onboarding assessments, ongoing configuration review, and decommissioning
- Endpoint Security: Support endpoint security policies and vulnerability management, ensuring endpoint telemetry feeds into detection and response workflows
- Security Detection & Response: Develop scripts and integrations that extend visibility across corporate systems, partnering with the Detection & Response team to surface signals from SaaS and business applications
Our take
The explosive popularity of generative AI tools has seen specialized solutions popping up for all kinds of industries. Hoping to help supercharge efficiency and productivity for legal teams, Harvey supplies generative AI that can assist with documentation, as well as aid research and optimize workflows.
Via natural language instructions, Harvey helps draft and analyze legal documents. It can also answer complex questions across large document sets, or even handle research queries that cover multiple domains in legal, regulatory and tax.
Its ability to support legal practitioners as if it's another member of the team is what makes Harvey particularly interesting. This approach has seen the company raise substantial funding, reaching Unicorn status in 2024. Funds are now being used to expand to new geographies, grow headcount and further collect and curate data to train more “domain-specific” AI models.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 10 rounds)
Mar 2026
$200m
LATE VC
Oct 2025
$59m
GROWTH EQUITY VC
Total funding: $1.2bn
Company HQ
Financial District, San Francisco, CA
Leadership
Winston Weinberg
(Co-Founder & CEO)Graduated with a Juris Doctor from the USC Gould School of Law, then spent 1 year as an Associate at O'Melveny & Myers before founding Harvey.
Gabe Pereyra
(Co-Founder & President)Previously worked as a Research Scientist at Meta and DeepMind. Also spent a year as a Brain Resident at Google.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 245 more jobs at Harvey