Corporate Security Engineer
About The Position
Some of the world's largest companies and their law firms use Harvey’s AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex challenges in less time. Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else. In this role you will join our corporate security function which works to ensure that our IT and business systems are secure, compliant, and have a high degree of user satisfaction. This program is scaling quickly along with our company as we have been doubling in headcount every few quarters and continue to grow at a rapid pace. Our security program at Harvey is driven by our commitment to securing the data entrusted to us by our customers as well as our corporate intellectual property. The corporate security team balances risk with user experience and provides a secure foundation for all other security and IT programs and the company as a whole. We seek not just to build security through industry best practice but to validate every assumption through threat modelling, real-world testing, and by incorporating lessons learned from breaches and attacks at other companies.
Requirements
- Demonstrated experience deploying new IT systems and processes across the organization with high user satisfaction.
- Demonstrated ability to identify risks and vulnerabilities in IT and business systems and to work cross-functionally throughout the company to balance risk with company priorities and effectively communicate risk to stakeholders.
- Understanding of and ability to debug IT systems, including X.509, SAML, SCIM.
- Familiarity with endpoint engineering for macOS and Windows
- Software Engineering and DevOps experience with proficiency in python and/or golang as well as familiarity with Terraform and/or Pulumi
- 4+ years of experience in security-focused software engineering, corporate engineering, IT, and/or program management.
Nice To Haves
- Experience with Okta, Salesforce, NetSuite, Workday, Microsoft Entra/Azure/InTune, JAMF, and/or ConductorOne is a plus
- Experience with generative AI or the legal field is not required.
Responsibilities
- Support implementation of our Identity Governance and Administration (IGA) application to ensure that employees can seamlessly gain the appropriate level of access for their role and we can efficiently meet compliance objectives for access approvals and revocation of access upon separation.
- Evolve our corporate device trust program to ensure only compliant devices can access corporate and production systems.
- Support endpoint security efforts including security policies, controls, and vulnerability management
- Partner with our IT & Business Systems team and provide security expertise and oversight over the implementation and operations of SaaS applications and business systems
- Partner with the Security Detection & Response team to ensure visibility into corporate systems including development of scripts and integrations as needed
- Partner with the Trust & Compliance team to streamline or automate evidence collection to support internal and independent audits.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
Number of Employees
251-500 employees
