About this role
The Director of Detection and Response is a leadership position based in New York at Harvey, suited for an experienced security professional ready to direct threat detection and incident response operations for AI-native legal software. This role operates within a fast-scaling organization dedicated to transforming professional services through advanced technology and secure enterprise platforms.
Role Overview
Harvey develops AI-native software for professional services, making security a core foundation for sensitive customer workflows and information. The Director of Detection and Response will own the overarching strategy, operational readiness, and technical direction for safeguarding both the production platform and corporate environments. Working alongside the CISO and leadership across various departments, this position translates business risk into a targeted defense program to protect customer data while ensuring the company scales securely.
Key Responsibilities
Requirements
Nice to Have
Skills and Tools
Salary and Benefits
About the Company
Harvey builds AI-native software for professional services by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise. The company operates with core values centered on decisiveness, simplicity, and a relentless drive for excellence.
How to Apply
To apply for this position, please visit the official company careers page.
Skills and tech stack
Questions candidates ask
What is the salary range for the Director of Detection and Response?
The salary ranges from $280,000 to $385,000 USD, with additional offerings in equity and bonuses.
Where is this role located?
This position is located in New York.
What departments will this director collaborate with?
The director will work closely with the CISO and leaders across Engineering, Infrastructure, IT, Legal, Privacy, Communications, and Customer Trust.
What are the primary areas of focus for threat defenses in this role?
Defenses focus on meaningful threats such as account compromise, data theft, insider risk, privileged-access abuse, and abuse of AI-enabled workflows.
Is experience with AI or machine learning environments required?
While core security leadership and technical experience are required, experience protecting AI/ML environments, enterprise SaaS, or sensitive customer data is specifically noted as especially valuable.