Infrastructure Security Engineer

Harvey is seeking an Infrastructure Security Engineer to build secure-by-default infrastructure for its AI platform serving over 1, 000 global customers. You'll join an engineering-first security team that combines offensive security expertise with software development to protect highly sensitive client data. Your work will establish a critical foundation, enabling product and research teams to innovate rapidly without compromising security.

What you'll do

• Incorporate secure design principles into Harvey's cloud architecture and infrastructure.
• Develop isolation mechanisms, such as sandboxing, in collaboration with the product engineering team.
• Review security-critical configuration changes and serve as code owner for security-critical Infrastructure-as-Code deployments.
• Audit existing cloud environments to identify vulnerabilities and guide remediation efforts.
• Develop policies and procedures for the secure creation and ongoing operation of cloud environments.

What Harvey is looking for

• 5+ years of experience in Security Engineering, Software Engineering, or Site Reliability Engineering.
• Demonstrated ability to write high-quality software and build production-grade infrastructure.
• Strong fundamentals in networking, operating systems, and cryptographic protocols.
• Deep knowledge of Kubernetes, including common misconfigurations and privilege escalation vectors.
• Proven ability to identify weaknesses and privilege escalation paths in real-world cloud environments.
• Hands-on experience applying security best practices in major cloud platforms (AWS, Azure, or Google Cloud).
• Familiarity with large-scale Infrastructure as Code deployments and Kubernetes policy enforcement (a plus).