Corporate Security Engineer

Position:
Staff Corporate Security Engineer

Company:
Harvey

Compensation:
$220K – $330K

Location:
United States, San Francisco

Employment Type:
Full time

Work Arrangement:
Hybrid

Short Summary:
At Harvey, we’re transforming how legal and professional services operate. This role is crucial in securing the company's IT and business systems as we grow rapidly, balancing risk with user experience through threat modeling and real-world testing.

Responsibilities:
- Design, implement, and govern security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms.
- Own the security review lifecycle for new integrations and automate posture monitoring.
- Build and operate Harvey's legal hold infrastructure, including data preservation and custodian management.
- Provide security oversight across the SaaS application lifecycle.
- Support endpoint security policies and vulnerability management.
- Develop scripts and integrations to enhance visibility across corporate systems.

Requirement:
- Demonstrated experience securing enterprise SaaS environments, including integration security and API token management.
- Experience building or managing eDiscovery and legal hold programs.
- Strong software engineering fundamentals with proficiency in Python and/or Go.
- Ability to identify risks and communicate them clearly to stakeholders.
- Familiarity with endpoint security for macOS and Windows environments.
- 4+ years of experience in security engineering or related fields.

Benefits:
- Comprehensive health, dental, and vision coverage.
- Retirement benefits (401k match up to 4%).
- Flexible PTO.
- Participation in equity plan and benefits program.