Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate
25M+ users worldwide, 6M+ generations per day, powering 390 of Fortune 500 brands
Building at the frontier of AI-powered video creation and next-generation creative tools
Responsibilities
Translate security, privacy, and compliance requirements into technical controls, automated checks, and enforcement mechanisms
Build pipelines and integrations that aggregate control, asset, identity, and system data across cloud infrastructure, IdP, HRIS, source control, CI/CD, and SaaS applications
Turn data into automated control checks, live monitoring, dashboards, alerts, and audit-ready evidence
Build preventative controls and release gates that identify or block security and privacy issues before production
Design controls that remain effective as employees, locations, vendors, systems, infrastructure, and products rapidly change
Build a unified controls approach where evidence can be collected once and mapped across multiple frameworks
Automate evidence collection, control testing, monitoring, and exception management
Integrate with systems and controls already owned by Security, Engineering, IT, and other teams
Continuously test whether controls are working and detect regressions or drift
Instrument control effectiveness so stakeholders can understand risk posture from live data
Design agentic and AI-assisted workflows for evidence analysis, control testing, monitoring, and audit-response preparation
Help build the technical evidence base for AI-related certifications and assurance
Requirements
6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles
Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations
Hands-on experience personally building or automating security and compliance controls
Production-grade scripting or programming experience, such as Python, including working with APIs and integrations
Strong understanding of frameworks such as SOC 2 and ISO 27001
Ability to distinguish between a control that technically exists and one that is effective, enforced, and continuously monitored
Experience building in rapidly changing or 0→1 environments
Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity
Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders
Conditions
Hybrid role based in the San Francisco Bay Area, three full days per week in the San Francisco office
Base salary range: $220,000 - $280,000, depending on experience, skills, scope, and location
Bonus eligible and may participate in the discretionary annual bonus program
Equity: eligible to participate in the company's stock option program
Benefits: medical, dental, and vision insurance, 401(k) with company matching