Harvey

Staff Infrastructure Security Engineer

San Francisco, Remote. Posted 20 days ago

The role

You will set the technical direction for secure-by-default infrastructure security across the platform. This includes designing processes for least privilege, component isolation, and managing attack surface for a multi-tenant SaaS offering.

What you will do

  • Incorporate secure design principles into cloud architecture.
  • Establish reusable security patterns, standards, and guardrails.
  • Develop isolation mechanisms in collaboration with product engineering.
  • Review security-critical configuration changes and act as Codeowner for cloud configurations.
  • Manage risks and vulnerabilities in the Cloud environment.
  • Translate security requirements into concrete engineering investments.
  • Define infrastructure security architecture and multi-quarter roadmaps.
  • Mentor and develop other security engineers on the team.

Required qualifications

  • 8+ years experience in Security Engineering and/or Software Engineering
  • Demonstrated experience writing high-quality software, building production-grade infrastructure and raising the security bar across engineering teams
  • Strong fundamentals in networking, operating systems, and cryptographic protocols
  • In-depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors
  • Demonstrated ability to find weaknesses in real-world cloud environments
  • Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud)
  • Track record of driving cross-functional security initiatives and influencing engineering decisions across teams
  • Experience setting security standards and best practices at an organizational scale

Nice to have

  • Familiarity with large-scale Infrastructure as Code (IaC) deployments
  • Familiarity with Kubernetes Admission Controllers and policy enforcement
  • Exposure to multi-cloud environments

About the company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.

Staff Infrastructure Security Engineer at Harvey | JobZoey