We're hiring a Senior/Staff Product Security Engineer to build the security-critical systems at the heart of Collective's member platform. This is a software engineering role first: you'll design and ship the code that governs how our platform authenticates users and services, what they're authorized to do, and how our members' data is protected. You'll own the authentication and authorization architecture end to end — not as a reviewer or advisor, but as the engineer whose commits land in production. You'll set the direction of this work, not just execute it: what gets built and in what order. As Collective expands its use of AI and agent-based workflows, you'll build the patterns those systems use to authenticate and operate safely. You'll sit on the Security team and spend your days in the product codebase, working alongside product engineers.

Role Overview As a Senior Software Engineer on the Security Engineering team at Harvey, you'll build and operate the foundational security services every other engineer at Harvey depends on: identity and access management, secrets and privileged access, and the tooling that makes the secure path the fast path. You'll design these systems, write the code, run them in production, and own the results. Agentic systems make this harder than it is at a typical SaaS company: when an AI agent acts on a user's behalf against their most sensitive documents, identity and authorization stop being solved problems.