Senior Software Engineer, Security
Remote • San Francisco • FullTime
Posted 7h ago
Job Location
San Francisco
Tech Stack
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
Harvey is transforming legal and professional services by combining agentic AI, an enterprise-grade platform, and deep domain expertise. This role offers a chance to build a generational company at an inflection point, with strong product-market fit and investor support. The team moves fast, takes ownership, and is committed to the mission, valuing decisiveness, simplicity, and continuous improvement. As a Senior Software Engineer on the Security Engineering team, you will build and operate foundational security services critical for all engineers, including identity and access management, secrets management, and tooling that prioritizes secure practices. You will design, code, and own these systems in production, addressing the unique challenges posed by agentic systems acting on sensitive user data.
Responsibilities
- Design, build, and operate core security services like authentication, authorization, access governance, secrets management, and privileged access across workforce, infrastructure, and production environments.
- Own the end-to-end identity infrastructure, including SSO, SCIM, and fine-grained authorization for enterprise customers.
- Develop secure-by-default libraries, abstractions, and self-service tooling to enable engineering teams to proactively identify, remediate, and prevent security issues.
- Take systems from initial concept to production-grade, including defining architecture, shipping code, implementing instrumentation, and ensuring reliability.
- Contribute to incident response and lead technical mitigation efforts for security issues.
- Enhance overall engineering security through design reviews, code reviews, and technical mentorship.
Requirements
- 5+ years of software engineering experience with a proven track record of shipping and operating production services.
- Hands-on experience building security infrastructure such as IAM, authentication/authorization, secrets management, or privileged access.
- Working knowledge of common vulnerability classes and the ability to analyze system failure modes under adversarial conditions.
- Strong programming skills and adaptability to work across different parts of the stack and in unfamiliar domains.
- Proficiency in building and maintaining production services using agentic coding tools (e.g., Claude Code, Codex) and understanding their effective use and limitations.
- Experience with cloud infrastructure (Azure, GCP, or AWS) and modern distributed system patterns.
- Demonstrated ability to translate security requirements into scalable engineering solutions.
- Strong communication and collaboration skills, with the ability to influence engineering teams without formal authority.