Harvey
Staff Product Security Engineer
$220K–$330K
San Francisco +1 · Hybrid · Staff · Full-time · Posted Oct 28, 2026
- Location
- San Francisco
New York - Experience
- 8+ years
About the job
Leads product security engineering by setting security strategy and standards, building secure-by-default tools, and partnering across teams to protect Harvey’s product and customer data.
What you'll do
- Own the product security roadmap, prioritize risks, and establish scalable security standards and secure design principles.
- Lead security reviews, threat modeling, vulnerability response, and development of secure-by-default tools and libraries.
- Drive cross-functional security initiatives, incident triage, and mentorship of engineers.
What they ask for
- 8+ years of experience in product security, application security and/or security-focused software engineering.
- Track record of identifying and remediating software vulnerabilities through CVEs, bug bounty awards or published research.
- Experience independently delivering production software end to end and leading complex cross-functional security initiatives.
- Experience mentoring engineers; ability to communicate security risks and metrics to senior leadership and non-security stakeholders.
Nice to have
- Experience building security programs or practices at hyper-growth startups.
- Background with cloud environments (Azure, GCP, AWS), cloud-native security patterns, or AI/ML and LLM application security.
Pay
$220,000 - $330,000 (base salary); $220K – $330K (compensation; type not specified)
Tools
Azure, GCP, AWS
AI focus
Experience with AI/ML systems and emerging security considerations for LLM-based applications is a nice-to-have; the role otherwise focuses on product security.
Model-written summary · the original posting is authoritative