Harvey
Staff Corporate Security Engineer
$220K–$330K
New York · Hybrid · Staff · Full-time · Posted Aug 1, 2026
- Experience
- 4+ years in security engineering, corporate engineering, IT, or a related program management function with a security focus.
About the job
Secures Harvey’s corporate IT and business systems by building scalable controls for SaaS integrations, legal holds, endpoints, and security detection and response.
What you'll do
- Design and govern security controls for SaaS platforms, APIs, OAuth connections, and cross-application data flows; review integrations and monitor security posture.
- Build and operate eDiscovery and legal hold infrastructure, including data preservation, collection workflows, and custodian management.
- Support security across business systems and endpoints, and develop scripts and integrations that improve detection and response visibility.
What they ask for
- Experience securing enterprise SaaS environments, including integration security, API token management, OAuth governance, and cross-application data-flow risks; working knowledge of SAML, OIDC, SCIM, and X.509.
- Proficiency in Python and/or Go, including building SaaS API integrations, and experience with Terraform and/or Pulumi.
- Ability to identify security risks and communicate them to engineering, legal, and executive stakeholders.
- Familiarity with endpoint security for macOS and Windows environments.
Nice to have
- Experience building or managing eDiscovery and legal hold programs; familiarity with Purview, Vault, Relativity, Everlaw, or similar tools.
- Experience with platforms such as Okta, Google Workspace, Salesforce, Workday, NetSuite, Microsoft Entra/Azure/Intune, JAMF, or Tines.
Pay
$220,000 - $330,000 USD (base salary); $220K – $330K (unspecified compensation type)
Tools
Python, Go, Terraform, Pulumi, SAML, OIDC, SCIM, X.509
AI focus
Generative AI experience is not required; curiosity about it is welcomed. The role does not specify AI development work.
Model-written summary · the original posting is authoritative