Staff Infrastructure Security Engineer

Harvey • San Francisco, CA

4d • $231,000 - $340,000

About The Position

Harvey is seeking a Staff Infrastructure Security Engineer to set the technical direction for secure-by-default infrastructure security across its platform and establish patterns and standards used by the broader engineering organization. The role focuses on designing and implementing processes and technologies for least privilege, component isolation, attack-surface management, and tenant isolation in Harvey’s multi-tenant SaaS offering. The engineer will create frameworks and repeatable patterns that help research and engineering teams work quickly and independently while preserving security. The position is part of a growing, engineering-first security team focused on maintaining a secure, trustworthy, and compliant platform for customers who entrust Harvey with sensitive data.

Requirements

• At least 8 years of experience in Security Engineering and/or Software Engineering.
• Demonstrated experience writing high-quality software, building production-grade infrastructure, and raising security standards across engineering teams.
• Strong fundamentals in networking, operating systems, and cryptographic protocols.
• In-depth knowledge of Kubernetes, common misconfigurations, and privilege-escalation vectors.
• Demonstrated ability to find weaknesses, such as privilege escalation, in real-world cloud environments.
• Experience applying security best practices in AWS, Azure, or Google Cloud environments.
• Track record of driving cross-functional security initiatives and influencing engineering decisions across teams.
• Experience setting security standards and best practices at organizational scale.

Nice To Haves

• Familiarity with large-scale infrastructure-as-code deployments.
• Familiarity with Kubernetes Admission Controllers and policy enforcement.
• Exposure to multi-cloud environments.

Responsibilities

• Incorporate secure design principles into cloud architecture.
• Establish reusable security patterns, standards, and guardrails that enable product and platform teams to build securely by default.
• Develop isolation mechanisms, such as sandboxing, in collaboration with the product engineering team.
• Review security-critical configuration changes and act as Codeowner for security-critical cloud configurations managed as infrastructure as code.
• Partner with Engineering and Product teams to manage risks and vulnerabilities in the cloud environment.
• Translate security requirements into concrete engineering investments.
• Define infrastructure security architecture and multi-quarter roadmaps.
• Mentor and develop other security engineers and raise the team's technical bar.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed