Detection & Response Security Engineer

Harvey Professional Class AI – Harvey is the platform built to meet the standards of the world’s leading professional service firms.Harvey is a secure AI platform for legal and professional services that augments productivity and automates complex workflows. Harvey uses algorithms with reasoning-adept LLMs that have been customized and developed by our expert team of lawyers, engineers and research scientists. We’ve found product market fit and are scaling our team very quickly.Some reasons to join Harvey are : Exceptional product market fit : We have partnered with the largest law firms and professional service providers in the world, including Paul Weiss, A&O Shearman, Ashurst, O'Melveny & Myers, PwC, KKR, and many others.Strategic investors : Raised over $200 million from strategic investors including Sequoia, Google Ventures, Kleiner Perkins, and the OpenAI Startup Fund.World-class team : Harvey is hiring the best talent from DeepMind, Google Brain, Stripe, FAIR, Tesla Autopilot, Glean, Superhuman, Figma, and more.Partnerships : Our engineers and researchers work directly with OpenAI to build the future of generative AI and redefine professional services.Performance : 4x ARR in 2024.Competitive compensation.Role Overview Some of the world's largest companies and their law firms use Harvey’s AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex challenges in less time.Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else.We are looking for a red-teamer to join our blue team to help us develop custom detections and fine-tune our alerting and response automations to defend against real, business-specific threats. Your offensive security expertise will be key in prioritizing the right defenses. You will have the opportunity to build your Software Engineering and System Design skills as you’re working on our modern, large-scale, threat detection platform built on ClickHouse.As an early member of our Security Detection and Response team, you will play a key role in shaping the foundation of our Detection and Response program. We are a small but effective team and have a high bar for our work.Our security program at Harvey is driven by our collective offensive security experience : Breaking into systems at other companies (in white-hat capacities), responding to real security incidents, and learning from other companies’ data breaches. We conduct regular pentests and red team exercises with external security firms. At the same time, we are all software engineers, contributing code daily, and approaching security topics with an engineering-first approach.What You’ll DoBuild strong relationships with key employees across the organization.Use your offensive security expertise to develop plausible threat scenarios and identify opportunities for detection.Assess logs for gaps and implement additional logging as needed.Build out our threat detection platform to handle increasing volumes of data (currently we handle ~1TB of log volume per day and this will grow ~10x over the next year).Lead incident response, as needed.Develop detection rules and a process for keeping them effective in collaboration with our other D&R Engineers.Participate in table-top and red team exercises to evaluate efficacy.What You HaveDemonstrated ability to find weaknesses (e.g. privilege escalation) in real-world corporate networks, cloud environments, or applications.Hands-on experience responding to security incidents.Strong understanding of computer networks, operating systems, and cryptographic protocols.No experience with generative AI or legal is required.3 years of experience in Software Engineering.4 years of experience in Security, Software Engineering, Site Reliability Engineering, or related disciplines.BonusExperience working at a small company, smaller independent division of larger company, or a hyper-growth startup.Experience with ClickHouse or similar data warehouses.Red team experience.Experience in incident commander role, managing security incidents or other disasters.Please find our CA applicant privacy notice here .Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity / expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.We are in the early innings of a generational company. Joining early at a hypergrowth startup has proven to lead to exponential growth in responsibility, access, and ability. Apply here today!#J-18808-Ljbffr