Staff Infrastructure Security Engineer

Harvey • New York, NY

4d • $231,000 - $340,000

About The Position

Harvey is hiring a Staff Infrastructure Security Engineer to set technical direction for secure-by-default infrastructure security across its platform. The role will establish the patterns and standards that the broader engineering organization builds on, including processes and technologies for least privilege, component isolation, attack-surface management, and tenant isolation in a multi-tenant SaaS environment. The engineer will create frameworks and repeatable patterns that let research and engineering teams work independently and quickly without compromising security. The role is part of a rapidly growing, engineering-first security program focused on protecting customers’ sensitive data and maintaining a secure, trustworthy, and compliant platform.

Requirements

• At least 8 years of experience in Security Engineering and/or Software Engineering.
• Demonstrated experience writing high-quality software, building production-grade infrastructure, and raising security standards across engineering teams.
• Strong fundamentals in networking, operating systems, and cryptographic protocols.
• In-depth knowledge of Kubernetes, common misconfigurations, and privilege-escalation vectors.
• Demonstrated ability to find weaknesses, such as privilege escalation, in real-world cloud environments.
• Experience applying security best practices in AWS, Azure, or Google Cloud environments.
• Track record of driving cross-functional security initiatives and influencing engineering decisions across teams.
• Experience setting security standards and best practices at organizational scale.

Nice To Haves

• Familiarity with large-scale Infrastructure as Code (IaC) deployments.
• Familiarity with Kubernetes Admission Controllers and policy enforcement.
• Exposure to multi-cloud environments.

Responsibilities

• Incorporate secure design principles into cloud architecture.
• Establish reusable security patterns, standards, and guardrails that enable product and platform teams to build securely by default.
• Develop isolation mechanisms, such as sandboxing, in collaboration with product engineering.
• Review security-critical configuration changes and act as Codeowner for security-critical parts of cloud configurations, which are managed as infrastructure as code.
• Partner with Engineering and Product teams to manage risks and vulnerabilities in the cloud environment.
• Translate security requirements into concrete engineering investments.
• Define infrastructure security architecture and multi-quarter roadmaps.
• Mentor and develop other security engineers and raise the team's technical bar.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed