Latest AI JobsBrowse Jobs
H

Director of Detection and Response

HarveySan FranciscoSecurity
Apply on company site
Salary
$280K – $385K
Job type
Full-time
Work mode
Remote
Experience
Senior
Posted
8 Oct 2026
Status
Open · checked 7d ago

About this role

This role suits an experienced technical security leader who wants to direct threat detection and incident response operations for a growing AI platform in San Francisco. The position sits at Harvey, guiding security strategy across production and corporate environments to protect sensitive customer data and critical business workflows.

Role Overview

Harvey builds AI-native software for professional services, making security a fundamental priority for the organization. The Director of Detection and Response will own the detection and response strategy, technical direction, and operational readiness. Working alongside the CISO and leaders across engineering, infrastructure, IT, legal, and customer trust, this leader translates business risk into a focused program that safeguards user data while enabling rapid growth.

Key Responsibilities

Build and lead the detection and response organization by hiring engineers, developing technical leaders, and managing the roadmap and staffing plan.
Own incident response and crisis readiness by establishing severity criteria, playbooks, escalation paths, and sustainable coverage for critical threats.
Direct detection as an engineering capability by setting technical direction for telemetry, detection pipelines, forensic tooling, and response automation across cloud, endpoint, identity, SaaS, and application environments.
Focus defenses on meaningful threats including account compromise, data theft, insider risk, and the abuse of AI-enabled workflows.
Partner cross-functionally with engineering, IT, legal, privacy, and communications on sensitive investigations and crisis decisions.
Turn security incidents into lasting improvements through blameless reviews, verified corrective actions, and performance metrics.

Requirements

Experience building and leading detection and response, incident response, or security engineering teams within a technology company operating complex production systems.
Demonstrated incident response background with the ability to lead investigations, make timely containment decisions, and communicate clearly with executives and engineers.
Technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft, with depth in detection engineering or digital forensics.
Experience applying an engineering approach to security operations through building detection platforms, investigation tools, or response automation.
Capability to turn business risk into a focused strategy and deliver results through cross-functional partnership and influence.

Nice to Have

Experience protecting enterprise SaaS, sensitive customer data, or AI and machine learning environments.
Background investigating insider threats, partnering on privileged-access governance, or leading response under regulatory and public scrutiny.

Skills and Tools

Cloud infrastructure security
Operating systems and networking
Identity and access management
Detection engineering and threat hunting
Digital forensics and incident response tooling
Response automation pipelines

Salary and Benefits

Salary range between $280,000 and $385,000 USD
Equity offerings included
Bonus offerings included

About the Company

Harvey is transforming professional services by combining frontier agentic AI, an enterprise-grade platform, and domain expertise. The organization operates under values of decisiveness, simplicity, and completing the mission.

How to Apply

Applicants should apply directly on the official Harvey careers page.

Skills and tech stack

Cloud InfrastructureSaaS EnvironmentsEndpoint ToolsIdentity SystemsDetection PipelinesForensic ToolingResponse Automation

Questions candidates ask

What is the salary range for the Director of Detection and Response?

The salary ranges from $280,000 to $385,000 USD, with additional offers for equity and bonuses.

Where is the position located?

The role is located in San Francisco.

What are the core responsibilities of this position?

The role involves building and leading the detection and response team, managing major security incidents, establishing detection as an engineering capability, focusing defenses on relevant threats, and collaborating across departments on investigations.

What background is helpful for this role?

Experience protecting enterprise SaaS, sensitive customer data, or AI and machine learning environments, along with handling insider threats and regulatory scrutiny, is especially valuable.

How should I apply for this job?

Candidates should submit applications on the official company careers page.

Ready to apply?

The application is on the official Harvey careers page.

Apply on company site