Staff Corporate Security Engineer

The role

This person will secure the company's IT and business systems by designing security controls for SaaS integrations and managing the eDiscovery and legal hold program. They will also provide security oversight for the SaaS application lifecycle and support endpoint security.

What you will do

• Design, implement, and govern security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms.
• Own the security review lifecycle for new integrations and automate posture monitoring.
• Build and operate Harvey's legal hold infrastructure, including data preservation, collection workflows, and custodian management.
• Partner with Legal and Compliance to meet litigation readiness requirements.
• Provide security oversight across the SaaS application lifecycle including vendor onboarding, configuration review, and decommissioning.
• Support endpoint security policies and vulnerability management.
• Develop scripts and integrations to extend visibility across corporate systems.

Required qualifications

• Experience securing enterprise SaaS environments, including integration security, API token management, OAuth governance, and cross-application data flow risk.
• Working knowledge of authentication/authorization standards (SAML, OIDC, SCIM, X.509).
• Experience building or managing eDiscovery and legal hold programs, including data preservation workflows and custodian management.
• Proficiency in Python and/or Go.
• Experience building integrations against SaaS APIs.
• Experience with infrastructure-as-code tooling such as Terraform and/or Pulumi.
• Ability to identify risks and vulnerabilities in IT and business systems and communicate risk to stakeholders.
• Familiarity with endpoint security for macOS and Windows environments.
• Experience with tools such as Okta, Google Workspace, Salesforce, Workday, NetSuite, Microsoft Entra/Azure/Intune, JAMF, Tines, or similar platforms.
• 4+ years of experience in security engineering, corporate engineering, IT, or a related program management function with a security focus.

Nice to have

• Familiarity with tools such as Purview, Vault, Relativity, Everlaw, or similar platforms.
• Curiosity about generative AI or the legal industry.

About the company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.