Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

This role joins Harvey's corporate security function, securing the company's IT and business systems as Harvey grows rapidly. It requires balancing risk with user experience and validating assumptions through threat modeling and real-world testing. The ideal candidate understands data flows between SaaS applications, can identify security weaknesses in complex integrations, and can build scalable controls. Experience with eDiscovery workflows and legal holds is a plus.

Responsibilities

Design, implement, and govern security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms.
Own the security review lifecycle for new integrations and automate posture monitoring.
Build and operate legal hold infrastructure, including data preservation, collection workflows, and custodian management.
Partner with Legal and Compliance to meet litigation readiness requirements.
Provide security oversight across the SaaS application lifecycle, including vendor onboarding assessments, configuration review, and decommissioning.
Support endpoint security policies and vulnerability management.
Develop scripts and integrations to extend visibility across corporate systems.
Partner with the Detection & Response team to surface signals from SaaS and business applications.

Requirements

Demonstrated experience securing enterprise SaaS environments, including integration security, API token management, OAuth governance, and cross-application data flow risk.
Working knowledge of authentication/authorization standards (SAML, OIDC, SCIM, X.509).
Ability to debug real-world integration failures.
Experience building or managing eDiscovery and legal hold programs, including data preservation workflows, custodian management, and coordination with Legal and outside counsel.
Strong software engineering fundamentals with proficiency in Python and/or Go.
Experience building integrations against SaaS APIs.
Experience with infrastructure-as-code tooling such as Terraform and/or Pulumi.
Ability to identify risks and vulnerabilities in IT and business systems.
Ability to communicate risk clearly to stakeholders across engineering, legal, and executive audiences.
Familiarity with endpoint security for macOS and Windows environments.
4+ years of experience in security engineering, corporate engineering, IT, or a related program management function with a security focus.

Skills

Integration security
API token management
OAuth governance
Cross-application data flow risk
SAML
OIDC
SCIM
X.509
eDiscovery
Legal hold
Data preservation workflows
Custodian management
Python
Go
SaaS APIs
Terraform
Pulumi
macOS endpoint security
Windows endpoint security
Okta
Google Workspace
Salesforce
Workday
NetSuite
Microsoft Entra/Azure/Intune
JAMF
Tines

Experience Level

4+ years of experience

Salary/Compensations

$220,000 - $330,000 USD

About the Company

At Harvey, we’re transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.
We have strong product-market fit and world-class investor support.
We’re scaling fast and defining a new category in real time.
Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence.
We live by three values: Decisiveness, Simplicity, and Job's Not Finished.
Some of the world's largest companies and their law firms use Harvey's AI to deliver world-class client services at unprecedented scale, entrusting Harvey with their most sensitive documents in the process.

Equal Opportunity

Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai