About the company
Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools.
About the role
We’re looking for an IT Security Engineer to own and strengthen the security of our corporate technology environment. This is a hands-on role spanning identity and access management, endpoint security, SaaS security, Zero Trust, security automation, and incident response.
What You’ll Do
- Identity & Access Management: Own and strengthen identity and access controls across our corporate environment, with a focus on Microsoft Entra ID. Implement and maintain SSO/SAML, SCIM provisioning, MFA, Conditional Access, and RBAC. Build and improve automated joiner, mover, and leaver (JML) workflows. Regularly review permissions, privileged access, and authentication policies. Help establish identity as the foundation of our Zero Trust security model.
- Endpoint Security: Manage and improve endpoint security through Microsoft Intune/MDM, device compliance policies, and endpoint protection tooling. Deploy and maintain EDR capabilities. Establish and enforce security baselines. Investigate endpoint security events and remediate compromised devices.
- SaaS & Corporate Application Security: Assess and improve the security posture of corporate SaaS applications. Partner with application owners to implement appropriate controls. Identify shadow IT, excessive permissions, insecure configurations. Help establish scalable security standards.
- Zero Trust & Corporate Access: Design and implement Zero Trust principles across identity, endpoints, applications, and corporate access. Strengthen controls around privileged access, remote access, and access to sensitive systems.
- Security Automation: Automate repetitive security and IT workflows using scripts, APIs, and integrations. Build tooling to automate access reviews, provisioning, compliance checks, alert enrichment, remediation. Use scripting languages such as Python or JavaScript.
- Detection & Incident Response: Monitor and investigate security alerts. Perform initial investigation and triage. Support incident containment, remediation, and post-incident improvements. Build lightweight detections and alerts.
What We’re Looking For
- Strong hands-on experience with identity and access management, ideally within Microsoft Entra ID.
- Experience implementing or managing SSO/SAML, SCIM, MFA, Conditional Access, RBAC, and JML workflows.
- Experience with MDM and endpoint security, ideally Microsoft Intune and modern EDR tooling.
- Understanding of SaaS and corporate application security.
- Experience implementing or operating within a Zero Trust security model.
- Ability to automate workflows using scripts and APIs, with experience in a language such as Python or JavaScript.
- Working knowledge of security detection, investigation, and incident response.
- Strong security judgment.
- Comfortable operating independently in a fast-moving startup environment.
- Builder mindset.
Nice to Have
- Experience with reverse engineering, CTFs, security competitions.
- Strong understanding of networking fundamentals.
- Experience securing rapidly scaling or highly technical organizations.
- Experience working closely with engineering or product security teams.
- Familiarity with cloud security concepts and modern security monitoring tools.
Compensation & Benefits
- Base Salary: $165 - $250k per year, depending on experience, skills, scope, and location.
- Equity: participation in the company’s stock option program.
- Benefits: comprehensive benefits package.
- Hybrid role based in the San Francisco Bay Area.