Harvey
Staff Corporate Security Engineer
$220K–$330K
San Francisco · Hybrid · Staff · Full-time · Posted Aug 1, 2026
- Experience
- 4+ years in security engineering, corporate engineering, IT, or a related program management function with a security focus.
About the job
Secures Harvey’s corporate IT and business systems by building scalable controls for SaaS integrations, legal holds, endpoints, and detection and response.
What you'll do
- Design and govern security controls for SaaS platforms, integrations, APIs, OAuth connections, and cross-application data flows.
- Build and operate eDiscovery and legal hold workflows, partnering with Legal and Compliance on litigation readiness.
- Support endpoint security and vulnerability management, and build scripts and integrations that improve detection across corporate systems.
What they ask for
- Experience securing enterprise SaaS environments, including integration security, API token management, OAuth governance, and cross-application data flow risk; working knowledge of SAML, OIDC, SCIM, and X.509.
- Strong software engineering fundamentals, with Python and/or Go proficiency and experience building SaaS API integrations; experience with Terraform and/or Pulumi.
- Ability to identify risks and vulnerabilities and communicate them clearly to technical and business stakeholders.
- Familiarity with endpoint security for macOS and Windows environments.
Nice to have
- Experience building or managing eDiscovery and legal hold programs; familiarity with Purview, Vault, Relativity, Everlaw, or similar platforms.
- Experience with generative AI or the legal industry is not required; curiosity about both is welcomed.
Pay
$220,000 - $330,000 USD (base salary)
Tools
Python, Go, Terraform, Pulumi, SAML, OIDC, SCIM, X.509
Model-written summary · the original posting is authoritative