Staff Corporate Security Engineer

Навыки

Обязанности

• 01Design, implement, and govern security controls for cross-application data flows, API integrations, OAuth connections, and third-party SaaS platforms
• 02Own the security review lifecycle for new integrations and automate posture monitoring to catch drift early
• 03Continue to build and operate Harvey's legal hold infrastructure, including data preservation, collection workflows, and custodian management
• 04Partner with Legal and Compliance to meet litigation readiness requirements across our collaboration and productivity stack
• 05Provide security oversight across the SaaS application lifecycle — vendor onboarding assessments, ongoing configuration review, and decommissioning
• 06Support endpoint security policies and vulnerability management, ensuring endpoint telemetry feeds into detection and response workflows
• 07Develop scripts and integrations that extend visibility across corporate systems, partnering with the Detection & Response team to surface signals from SaaS and business applications

Требования

• 01Demonstrated experience securing enterprise SaaS environments, including integration security, API token management, OAuth governance, and cross-application data flow risk
• 02Working knowledge of authentication/authorization standards (SAML, OIDC, SCIM, X.509) and the ability to debug real-world integration failures
• 03Experience building or managing eDiscovery and legal hold programs, including data preservation workflows, custodian management, and coordination with Legal and outside counsel
• 04Strong software engineering fundamentals with proficiency in Python and/or Go
• 05Experience building integrations against SaaS APIs (not just configuring through consoles)
• 06Experience with infrastructure-as-code tooling such as Terraform and/or Pulumi for managing security configurations
• 07Ability to identify risks and vulnerabilities in IT and business systems and communicate that risk clearly to stakeholders across engineering, legal, and executive audiences
• 08Familiarity with endpoint security for macOS and Windows environments
• 094+ years of experience in security engineering, corporate engineering, IT, or a related program management function with a security focus

Условия

• 01$220,000 - $330,000 USD