Staff Product Security Engineer

The role

You will drive high-leverage security initiatives and build security directly into the product. This role involves balancing hands-on technical work with cross-functional leadership and mentorship to design a product security program.

What you will do

• Define and own the product security roadmap
• Establish risk based prioritization for product security features
• Partner with security leadership to drive organization maturity
• Establish secure design principles for every stage of development
• Raise the security bar through scalable code and design reviews
• Innovate new ways to Threat Model and surface security vulnerabilities at scale
• Establish and evolve the security posture across Engineering
• Architect secure-by-default tools and libraries
• Drive incident triage and translate vulnerability findings into end to end solutions
• Directly mentor and lead junior engineers

Required qualifications

• 8+ years of experience in product security, application security and/or security-focused software engineering
• Track record of identifying and remediating software vulnerabilities through CVEs, bug bounty awards or published research
• Experience independently delivering high-quality, production software end to end
• Experience leading complex cross-functional security initiatives
• Ability to handle prioritization and tradeoff discussions with senior leadership
• Excellent communication and collaboration skills
• Excel at measuring and communicating security metrics and business risk reduction
• Experience mentoring both junior and senior engineers across engineering
• Proactive approach to solving complex security challenges
• Positive attitude and willingness to learn

Nice to have

• Experience building security programs or practices at hyper-growth startups
• Background with cloud environments (Azure, GCP, AWS) and cloud-native security patterns
• Experience with AI/ML systems and emerging security considerations for LLM-based applications

About the company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.