Harvey
Staff Infrastructure Security Engineer
San Francisco, Remote. Posted 20 days ago
The role
You will set the technical direction for secure-by-default infrastructure security across the platform. This includes designing processes for least privilege, component isolation, and managing attack surface for a multi-tenant SaaS offering.
What you will do
- Incorporate secure design principles into cloud architecture.
- Establish reusable security patterns, standards, and guardrails.
- Develop isolation mechanisms in collaboration with product engineering.
- Review security-critical configuration changes and act as Codeowner for cloud configurations.
- Manage risks and vulnerabilities in the Cloud environment.
- Translate security requirements into concrete engineering investments.
- Define infrastructure security architecture and multi-quarter roadmaps.
- Mentor and develop other security engineers on the team.
Required qualifications
- 8+ years experience in Security Engineering and/or Software Engineering
- Demonstrated experience writing high-quality software, building production-grade infrastructure and raising the security bar across engineering teams
- Strong fundamentals in networking, operating systems, and cryptographic protocols
- In-depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors
- Demonstrated ability to find weaknesses in real-world cloud environments
- Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud)
- Track record of driving cross-functional security initiatives and influencing engineering decisions across teams
- Experience setting security standards and best practices at an organizational scale
Nice to have
- Familiarity with large-scale Infrastructure as Code (IaC) deployments
- Familiarity with Kubernetes Admission Controllers and policy enforcement
- Exposure to multi-cloud environments
About the company
Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.