Harvey is seeking a Staff Corporate Security Engineer to join the corporate security function as the company scales its IT and business systems. This role focuses on securing enterprise SaaS environments by designing, implementing, and governing security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms; owning the security review lifecycle for new integrations and automating posture monitoring to detect drift. The candidate will build and operate Harvey's eDiscovery and legal hold programs, including data preservation, collection workflows, custodian management, and collaboration with Legal and Compliance to meet litigation readiness across our collaboration and productivity stack. You will provide security oversight across the SaaS application lifecycle—vendor onboarding assessments, ongoing configuration reviews, and decommissioning—plus endpoint security, vulnerability management, and telemetry-driven detection and response. The role also involves developing scripts and integrations to extend visibility across corporate systems and partnering with the Detection and Response team. Requirements include demonstrated experience securing enterprise SaaS environments, API token management, OAuth governance, cross-application data flow risk, and working knowledge of authentication/authorization standards (SAML, OIDC, SCIM, X.509); experience with eDiscovery and legal hold programs and tools (Purview, Vault, Relativity, Everlaw) is a plus; strong software engineering fundamentals in Python and/or Go; experience with T

Harvey is seeking a Staff Corporate Security Engineer to join the corporate security function as the company scales its IT and business systems. This role focuses on securing enterprise SaaS environments by designing, implementing, and governing security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms; owning the security review lifecycle for new integrations and automating posture monitoring to detect drift. The candidate will build and operate Harvey's eDiscovery and legal hold programs, including data preservation, collection workflows, custodian management, and collaboration with Legal and Compliance to meet litigation readiness across our collaboration and productivity stack. You will provide security oversight across the SaaS application lifecycle—vendor onboarding assessments, ongoing configuration reviews, and decommissioning—plus endpoint security, vulnerability management, and telemetry-driven detection and response. The role also involves developing scripts and integrations to extend visibility across corporate systems and partnering with the Detection and Response team. Requirements include demonstrated experience securing enterprise SaaS environments, API token management, OAuth governance, cross-application data flow risk, and working knowledge of authentication/authorization standards (SAML, OIDC, SCIM, X.509); experience with eDiscovery and legal hold programs and tools (Purview, Vault, Relativity, Everlaw) is a plus; strong software engineering fundamentals in Python and/or Go; experience with T