Incident Handler

The role

The Incident Handler will drive and lead incident response for security events. You will command incidents, coordinate containment, and enforce fixes to prevent recurrence.

What you will do

• Build strong relationships with key employees across the organization
• Participate in security incidents, leading investigations across cloud infrastructure, identity systems, corporate environments, and AI platforms
• Use, maintain, and contribute to an internally developed agentic SOC
• Work cross functionally across technical and operational orgs to ensure PRs ship and policies are enforced
• Contribute to the Detection & Response roadmap, including metrics, SLAs, threat modeling, and tabletop exercises
• Work across teams to ensure incident follow ups are meaningfully closed
• Mentor engineers and incident responders
• Build playbooks and operational standards

Required qualifications

• 3+ years of experience in Incident Response, Detection & Response, Security Operations, Threat Detection, or related security engineering disciplines
• Experience participating in investigations and response efforts for complex security incidents in cloud-native environments
• Deep understanding of attacker tactics, techniques, and procedures (MITRE ATT&CK and modern threat actor tradecraft)
• Experience with one or more major cloud platforms (AWS, GCP, Azure)
• Strong knowledge of operating systems, networking, and identity systems
• Experience building security automation and tooling
• Strong scripting or software engineering skills in Python, Go, or similar languages
• Experience communicating incident status and risk to senior leadership

About the company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.