← Back to jobs

Head Of Security Engineering

harvey

Híbrido New York
Uncategorized

Job Score

80 pts
Hybrid model (+80)

Why Harvey

At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come.

This is a rare chance to help build a generational company at a true inflection point. With 1500+ customers in 60+ countries, strong product-market fit, and world-class investor support, we’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched.

Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you.

At Harvey, the future of professional services is being written today — and we’re just getting started.

Role Overview

We're looking for a Director of Security Engineering to build and scale the security foundations that enable Harvey to move quickly while maintaining the trust of our customers. This leader will own the core security engineering platform, including identity and access management, security tooling, and the systems that help engineers build and operate secure products by default.

Security at Harvey is not a gatekeeper function—it's an engineering discipline that enables our company to move faster with confidence. This role will define the foundational security systems that support every engineer, every product, and every customer interaction, helping establish the secure platform upon which Harvey continues to grow.

What You'll Do

As Director of Security Engineering, you will define and execute the strategy for Harvey's foundational security platform.

You will:

  • Lead and grow a team of security and software engineers responsible for Harvey's security engineering capabilities.

  • Own Harvey's Identity and Access Management strategy across workforce, infrastructure, and production environments.

  • Build scalable authorization, authentication, access governance, secrets management, and privileged access systems.

  • Develop the security tooling ecosystem that empowers engineering teams to identify, remediate, and prevent security issues efficiently.

  • Partner closely with Infrastructure, Platform Engineering, Product Security, and Compliance teams to embed security into the software development lifecycle.

  • Drive automation-first approaches to security controls, reducing operational burden while increasing coverage and effectiveness.

  • Establish long-term technical architecture and roadmaps for foundational security services.

  • Build security capabilities that support Harvey's rapid growth, enterprise customer requirements, and evolving regulatory landscape.

  • Recruit, mentor, and develop high-performing engineering managers and senior individual contributors.

What You Have

  • 10+ years of software engineering, infrastructure, or security engineering experience, with significant leadership experience managing managers and senior engineers.

  • Experience building and operating large-scale identity, authentication, authorization, or access management systems.

  • Strong software engineering background with a track record of building production-grade platforms and developer-facing infrastructure.

  • Experience leading security engineering organizations in high-growth technology companies.

  • Deep understanding of cloud infrastructure, distributed systems, and modern application architectures.

  • Demonstrated ability to translate security requirements into scalable engineering solutions.

  • Experience partnering with executive leadership and influencing company-wide technical strategy.

  • Excellent communication skills and a bias toward pragmatic, business-aligned security decisions.

Particularly Exciting Backgrounds

We're especially interested in leaders who have:

  • Built production IAM platforms at scale.

  • Led platform security or security infrastructure organizations.

  • Created security products and services used broadly by engineering teams.

  • Scaled engineering organizations through periods of rapid company growth.

  • Worked in cloud-native, developer-platform, or highly regulated enterprise environments.

Compensation

$285,000 - $ 350,000 USD

Depending on your location, an Applicant Privacy Notice may apply to you. You can find all of our Applicant Privacy Notices [here].

#LI-AH1

Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Web3

The Web3 area represents the new phase of the decentralized internet, built on blockchain technology. Web3 professionals create decentralized applications (dApps), interact with smart contracts, manage digital assets (cryptocurrencies and NFTs), and utilize DeFi (Decentralized Finance) protocols, revolutionizing how data, ownership, and finance are managed online.

About Automation Engineer

The Automation Engineer is the professional responsible for designing, developing, and implementing solutions that automate manual and repetitive processes in IT, infrastructure, testing, and operations. They combine programming knowledge with DevOps and SRE vision to eliminate manual tasks and increase operational efficiency.

Key skills include Infrastructure as Code (Terraform, Ansible, Pulumi), CI/CD (Jenkins, GitHub Actions, GitLab CI), test automation (Selenium, Cypress, Playwright), network automation (Netconf, SDN), RPA (UiPath, Power Automate), and scripting (Python, Bash, PowerShell). Knowledge of Kubernetes, GitOps (ArgoCD, Flux), and automation platforms is a differentiator.

Automation Engineers in technology companies are highly valued, especially those who can create automated deployment pipelines, self-healing infrastructure, and internal developer platforms (IDP). The field offers opportunities from junior automation engineer to automation architect and head of automation.

About Product Owner

The Product Owner (PO) is the professional responsible for maximizing the value of the product delivered by the development team. They act as the voice of the customer and stakeholders, managing and prioritizing the product backlog, defining clear user stories, and ensuring the team works on the most valuable items for the business.

Key skills include backlog management, user story writing, prioritization (Mascow, RICE), agile methodologies (Scrum, Kanban), and stakeholder communication. Knowledge of tools like Jira, Trello, Azure DevOps, and Miro is essential.

Product Owners are highly sought-after professionals in the technology market, working collaboratively with Scrum Masters, Product Managers, and engineering teams to drive agility and continuous value delivery.

About Fullstack

Fullstack developers are versatile professionals capable of working on both frontend and backend of web and mobile applications. They master multiple technologies and can build complete products end-to-end, from the user interface to server infrastructure.

Key skills include proficiency in at least one complete stack (React/Vue/Angular + Node.js/PHP/Python/Java), databases (SQL and NoSQL), REST/GraphQL APIs, Git versioning, CI/CD, and basic infrastructure knowledge (Docker, cloud). Clean architecture, DDD, and testing are important differentiators.

Fullstack developers are highly valued in startups and companies that need versatile and autonomous professionals. The field offers opportunities from junior developer to software architect, with a focus on complete delivery, holistic product vision, and ability to work across multiple application layers.

About Product Manager

The Product Manager (PM) is the professional responsible for defining the strategy, vision, and roadmap of a digital product. They work at the intersection of technology, business, and user experience (UX), leading the discovery and delivery of solutions that solve real problems in a viable way for the company.

Key skills include product discovery, data and metrics analysis (AARRR, NPS, LTV), user research, go-to-market strategy, roadmapping, strategic prioritization, and leadership by influence. Tools like Amplitude, Mixpanel, Hotjar, Jira, and Notion are fundamental.

Product Managers play a central role in the growth of startups, scale-ups, and large technology companies, with career progression opportunities to Product Leader, Head of Product, and Chief Product Officer (CPO).

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

How n8n and Automation Open Doors to Premium Jobs

The Paradigm Shift in Web Development

The web development market has matured. A few years ago, mastering a traditional stack (like MERN or LAMP) was enough to secure a highly sought-after role. Today, the corporate landscape — especially in US startups hiring globally and offering six-figure compensation — demands speed and operational efficiency. It's no longer just about building from scratch, but knowing how to integrate complex ecosystems rapidly.

According to Gartner, hyperautomation is one of the top strategic technology trends of the decade. The modern developer must be an integration architect, capable of connecting CRMs, databases, AI APIs, and payment gateways in a matter of hours, not weeks. This is exactly where n8n becomes an indispensable tool in your portfolio.

Why n8n? The Power of "Fair-Code"

n8n is a node-based workflow automation tool. Unlike competitors aimed at non-technical users (such as Zapier or Make), n8n was designed with the developer in mind first. It allows raw JavaScript injection for complex data manipulation, custom HTTP requests, and, most importantly, features a fair-code licensing model that allows it to be self-hosted on a company's own infrastructure.

For technical recruiters and CTOs, a candidate who masters n8n demonstrates maturity. It proves that you understand SaaS cost reduction and value the security and sovereignty of the company's data.

Practical Tips to Land Your Next Role

If you want your resume to pass rigorous ATS (Applicant Tracking System) screening — like Greenhouse or Ashby — and reach the hands of Tech Leads, here are the core skills you should highlight when associating Web Development with n8n:

  • Mastery of Webhooks and RESTful APIs: The foundation of automation is system communication. Demonstrate your ability to create n8n workflows that listen to native Webhooks from your application (e.g., a checkout event in a Next.js e-commerce app) and trigger subsequent actions with low latency.
  • Hosting and Docker: n8n's biggest differentiator is self-hosting. In your resume, mention your ability to package and orchestrate n8n instances using Docker and Docker Compose. Familiarity with Cloud providers (AWS, GCP, or DigitalOcean) to deploy these instances is a massive bonus.
  • Advanced JSON and JavaScript Manipulation: Show that you don't rely solely on pre-built integrations. Using the "Code" node in n8n to transform large JSON payloads using raw JavaScript or TypeScript is what separates a regular user from an automation engineer.
  • Error Handling and Resilience: Systems fail. APIs go down. An amateur automation will break a company's process. In your portfolio, document how you use Error Trigger nodes to build automated retries and send alerts to Slack/Discord when an integration fails.

Your Portfolio is the Ultimate Proof

Just listing "n8n" in the skills section of your resume isn't enough. Create a repository on GitHub containing a real-world use case. For example: export the JSON file of an n8n workflow that reads new leads from a PostgreSQL database, enriches the data using the OpenAI API, and sends them to a CRM. Add a detailed README.md explaining the architecture. This is the ultimate bait for Senior roles.

References and Further Reading