Staff Infrastructure Security Engineer

Job summary

Responsibilities

Some of the world's largest companies and their law firms use Harvey’s AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex…

• Incorporate secure design principles into our cloud architecture.
• Establish reusable security patterns, standards, and guardrails that enable product and platform teams to build securely by default
• Develop isolation mechanisms (e.g. sandboxing) in collaboration with our product engineering team
• Review security-critical configuration changes and act as Codeowner for security-critical parts of our cloud configurations (everything is IaC)
• Partner with Engineering and Product teams to:

What they're looking for

• 8+ years experience in Security Engineering and/or Software Engineering
• Demonstrated experience writing high-quality software, building production-grade infrastructure and raising the security bar across engineering teams.
• Strong fundamentals in networking, operating systems, and cryptographic protocols
• In-depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors
• Demonstrated ability to find weaknesses (e.g. privilege escalation) in real-world cloud environments

Tech stack

• Kubernetes
• AWS
• Azure
• GCP