Technical Program Manager, Incident Response

Role Overview

The Incident Response Technical Program Manager is a senior cross-functional operator who will lead Harvey's response to security and reliability incidents, coordinating across engineering, security, and business teams under pressure.
You will join the Detection & Response function within Harvey's Information Security organization, whose mission is to detect, contain, and remediate threats to the platform that serves the world's leading law firms and enterprises. This role defines the standard for how Harvey runs and learns from incidents — building the coordination playbooks, communication protocols, and post-incident remediation programs that close structural gaps.
As the first dedicated incident response program hire, you will partner directly with security engineering, product, and executive leadership to shape a function from the ground up. This is a rare opportunity to build the incident management discipline at one of the fastest-growing AI companies, with meaningful influence over how a high-trust platform protects its most sensitive customer data.

• Own end-to-end coordination of security and reliability incidents — from initial triage through resolution — ensuring clear roles, rapid decision-making, and structured communication across engineering, security, legal, and customer‑facing teams.
• Design and implement incident management processes, runbooks, and escalation frameworks that scale with Harvey's growth and reflect the realities of operating AI‑native SaaS infrastructure.
• Lead post‑incident reviews and drive remediation programs to completion, tracking follow‑up items across teams and holding stakeholders accountable to timelines.
• Build and maintain incident readiness — including tabletop exercises, on‑call coordination improvements, and tooling for real‑time situational awareness.
• Serve as the communication hub during active incidents, translating technical status into clear updates for executives, legal, and customer success without losing fidelity.

• 5+ years of experience in incident management, technical program management, or a related coordination‑heavy role within a software or security organization.
• Demonstrated ability to lead cross‑functional teams through high‑pressure situations with composure, clarity, and strong interpersonal judgment.
• Sufficient technical depth to understand distributed systems, cloud infrastructure, and security concepts at a level that enables effective triage and stakeholder translation.
• Exceptional organizational skills — able to manage multiple concurrent work streams, track dependencies, and drive accountability without direct authority.
• Experience building incident response or operational programs from scratch, including defining processes, documentation, and success metrics in ambiguous environments.
• High emotional intelligence and the communication skills to operate credibly with engineers, executives, legal counsel, and external stakeholders alike.

$150,900 - $226,300 USD

Depending on your location, an Applicant Privacy Notice may apply to you. You can find all of our Applicant Privacy Notices here.

Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations.