Cloud Security Engineer

Harvey is a secure AI platform for professionals in law, tax, and finance that augments productivity and automates complex workflows. Harvey uses algorithms with reasoning-adept LLMs that have been customized by our expert team of lawyers, engineers, and research scientists. We’ve found product market fit and are scaling our team very quickly. Some reasons to join Harvey are:Exceptional product market fit: We have partnered with the largest law firms and professional service providers in the world like A&O, PwC, and many others.Strategic investors: Raised over $100 million from strategic investors including Sequoia, Kleiner Perkins, and the OpenAI Startup Fund.World-class team: Harvey is hiring the best technical and non-technical talent from DeepMind, Google Brain, Stripe, FAIR, Tesla Autopilot, Superhuman, Glean, and more.Partnerships: Our engineers and researchers work directly with OpenAI to build the future of generative AI and redefine professional services.Value: Top of market cash and equity compensation.RoleSome of the world’s largest companies and their law firms use Harvey to make sense of their legal documents and automate legal work. Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else.You will report to our Head of Security and take ownership of securing our infrastructure at Harvey. As an early member of our Security team, you will help lay the foundations of the security and privacy of our products. Your focus will be the security of our main application as well as producing repeatable patterns and guardrails for one-off research environments and special projects so that our research and engineering teams can move fast and not break things.Our security program at Harvey is driven by our collective offensive security experience: Breaking into systems at other companies (in white-hat capacities), responding to real security incidents, and learning from other companies’ data breaches. We conduct regular pentests and red team exercises with external security firms.ResponsibilitiesWork closely with our infrastructure teams to incorporate secure design principles into our cloud architecture.Develop and deploy security solutions in collaboration with our infrastructure team.Review security-critical configuration changes and act as Codeowner for security-critical parts of our cloud configurations (everything is IaC).Audit our existing cloud environment for vulnerabilities.Develop policies and procedures for the secure creation and operation of our cloud environments.QualificationsIn-depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors.Demonstrated ability to find weaknesses (e.g. privilege escalation) in real-world cloud environments.Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud).Strong networking and operating systems fundamentals.Software development experience.No experience with generative AI or legal is required.Experience4+ years experience in security or operations / SRE roles.Level: Senior.BonusExperience working at a small company or hyper-growth startup.CompensationThe expected range of compensation for this role is between $200,000 and $280,000. Additionally, this role is eligible to participate in our equity plan. The successful candidate’s starting salary will be determined based on non-discriminatory factors such as skills, experience, and geographic location.

#J-18808-Ljbffr