Senior Product Security Engineer

The role

You will build security directly into the product and drive high-leverage security initiatives. This role involves balancing hands-on technical work with cross-functional leadership and mentorship.

What you will do

• Lead critical security initiatives with Engineering, Product and Design.
• Build cross-functional partnerships and repeatable business processes at scale.
• Define and implement product security standards.
• Incorporate secure design principles at every stage of development.
• Proactively identify potential threats and vulnerabilities in our systems.
• Develop and implement solutions to safeguard Harvey products.
• Review product features and engineering code changes
• Drive secure baselines and security-first principles company-wide.
• Build secure-by-default libraries and tooling that enable product velocity at scale.
• Mentor and guide engineers through code reviews, design reviews, and technical guidance

Required qualifications

• 5+ years of experience in product security, application security, offensive security, and/or security-focused software engineering
• Experience identifying and remediating software vulnerabilities, demonstrated through CVEs, bug bounty awards, published research, or prior work experience.
• Experience delivering high-quality, production software.
• Ability to drive prioritization and tradeoff discussions with cross functional teams.
• Excellent communication and collaboration skills, particularly when translating security risks into business terms for non-security stakeholders.
• Excel at measuring and communicating security metrics and business risk reduction as it relates to product security investments.
• Experience mentoring engineers across engineering through code and design reviews.
• Proactive approach to solving complex security challenges.
• Positive attitude and willingness to learn.

Nice to have

• Experience building security programs or practices at hyper-growth startups
• Background with cloud environments (Azure, GCP, AWS) and cloud-native security patterns
• Experience with AI/ML systems and emerging security considerations for LLM-based applications

About the company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.