Director of Detection and Response

The role

The Director of Detection and Response will build and lead a team to identify threats and respond to incidents. You will own the detection and response strategy, technical direction, and operational readiness for the production platform and corporate environment.

What you will do

• Build and lead the organization by hiring and developing detection engineers, incident responders, and technical leaders.
• Own the roadmap, staffing plan, and investment decisions.
• Lead response to major security incidents, including investigation, containment, recovery, and executive communication.
• Build clear severity criteria, escalation paths, playbooks, and 24/7 coverage.
• Set technical direction for telemetry, detection pipelines, forensic tooling, and response automation.
• Apply software engineering practices to test detections and improve signal quality.
• Prioritize scenarios using threat intelligence, hunting, and an attacker's perspective.
• Partner with Engineering, IT, Legal, Privacy, Communications, and Customer Trust on investigations.
• Drive blameless reviews and ensure corrective actions are completed.
• Measure detection coverage, time to detect and contain, and responder workload.

Required qualifications

• Experience building and leading Detection and Response, incident response, or security engineering teams in a technology company with complex production systems.
• Record of hiring strong engineers, developing technical leaders, and scaling teams and operating models.
• Deep incident response experience and demonstrated judgment during serious security events.
• Strong technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft.
• Depth in detection engineering, threat hunting, or digital forensics.
• Experience building detection platforms, investigation tools, or response automation.
• Ability to turn business risk into a focused strategy through influence and partnership.

Nice to have

• Experience protecting enterprise SaaS, sensitive customer data, or AI/ML environments
• Experience investigating insider threats
• Experience partnering on privileged-access governance
• Experience leading response under regulatory and public scrutiny

About the company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.