Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Director of Detection and Response role.

Rezi rewrites your resume against Harvey's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Director of Detection and Response posting at Harvey — free, in seconds.

About the Role

Harvey is seeking a Director of Detection and Response to build and lead a team that identifies threats, responds to incidents, and enhances defenses. This role involves owning the Detection and Response strategy, technical direction, and operational readiness across production and corporate environments. The position requires technical leadership to build a scalable function through software, automation, and partnerships, while maintaining hands-on involvement in detection and investigations.

Responsibilities

Build and lead the Detection and Response organization, including hiring, developing talent, and establishing clear ownership and culture.
Own the roadmap, staffing plan, and investment decisions for the Detection and Response function.
Lead incident response and crisis readiness, coordinating investigations, containment, recovery, and executive communication.
Develop clear severity criteria, escalation paths, playbooks, and sustainable 24/7 coverage for critical threats.
Build detection as an engineering capability by setting technical direction for telemetry, detection pipelines, forensic tooling, and response automation.
Apply software engineering practices to test detections, improve signal quality, and reduce manual work.
Evaluate AI-assisted investigation with measurable quality and appropriate human oversight.
Focus defenses on meaningful threats by using threat intelligence, hunting, and an attacker's perspective.
Partner with offensive security and platform owners to validate coverage and close blind spots.
Make response a company capability by partnering with Engineering, IT, Legal, Privacy, Communications, and Customer Trust on sensitive investigations and crisis decisions.
Establish clear escalation and decision authority, preserve evidence, and provide accurate findings to support Legal-led notification and disclosure decisions.
Prepare cross-functional responders to contribute during incidents requiring broader support.
Drive blameless reviews and ensure corrective actions have owners, deadlines, and verified outcomes.
Measure detection coverage, time to detect and contain, recurring failure modes, and responder workload to guide investments and reduce customer impact.

Requirements

Experience building and leading Detection and Response, incident response, or security engineering teams in a technology company with complex production systems.
A record of hiring strong engineers, developing technical leaders, and scaling both the team and its operating model.
Deep incident response experience and demonstrated judgment during serious security events.
Ability to lead investigations with incomplete information, make timely containment decisions, and communicate clearly with executives, engineers, and business partners.
Composure, integrity, and discretion in sensitive investigations and decisions under scrutiny.
Strong technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft.
Depth in detection engineering, threat hunting, or digital forensics.
Understanding of how to investigate across corporate and production environments.
An engineering approach to security operations, backed by experience building detection platforms, investigation tools, or response automation.
Ability to evaluate architecture and code, guide senior engineers, and make practical decisions about what to build, buy, or retire.
Ability to turn business risk into a focused strategy and deliver it through influence and partnership.
Balance urgent response with long-term engineering work.
Experience protecting enterprise SaaS, sensitive customer data, or AI/ML environments is especially valuable.
Experience investigating insider threats, partnering on privileged-access governance, or leading response under regulatory and public scrutiny is valuable.

Skills

Detection engineering
Incident response
Security engineering
Threat hunting
Digital forensics
Cloud infrastructure
Operating systems
Networking
Identity management
Attacker tradecraft
Software engineering practices
Automation
AI-assisted investigation

Location

Remote

Work Type

Full-time

Experience Level

Director

Salary/Compensations

$280,000 - $385,000 USD

About the Company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.
The company has strong product-market fit and world-class investor support, and is scaling fast to define a new category.
Harvey's team moves fast, takes ownership, and is deeply committed to the mission, operating with intensity, staying close to customers, and pushing for excellence.
Harvey values Decisiveness, Simplicity, and Job's Not Finished.
Harvey is building AI-native software for professional services, where security is fundamental due to the sensitive information and critical workflows handled.

Equal Opportunity

Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
Harvey is committed to providing reasonable accommodations to applicants with disabilities.