Member of Technical Staff, Infrastructure Security
San Francisco Bay Area, USA$200k - $300kFull-timePosted 3mo ago
About the role
Hands-on security engineer responsible for designing, implementing, and operating security controls across identity and access management, endpoint security, SaaS applications, and corporate networks for Higgsfield AI.
Responsibilities
- Identity & Access Security: Design, implement, and maintain identity and access controls across Microsoft Entra ID and corporate applications.
- Configure and manage SSO/SAML, SCIM provisioning, MFA, Conditional Access, and RBAC.
- Secure and automate employee joiner, mover, and leaver (JML) workflows.
- Implement least-privilege access and strengthen authentication and authorization practices.
- Endpoint & Corporate Application Security: Own endpoint security controls across corporate devices, including Microsoft Intune/MDM, device compliance, and endpoint detection and response (EDR).
- Secure SaaS applications through access management, permissions, provisioning, and configuration reviews.
- Design and implement Zero Trust access controls based on user identity, device posture, and least-privilege principles.
- Identify and remediate security gaps across corporate systems and applications.
- Security Automation & Incident Response: Build scripts, API integrations, and automated workflows to improve security operations and reduce manual processes.
- Develop and maintain security monitoring, alerting, and detection capabilities.
- Investigate compromised accounts, suspicious activity, and endpoint security incidents, driving containment and remediation.
- Troubleshoot security infrastructure issues and continuously improve technical controls.
- Technical Ownership & Security Engineering: Identify and prioritize corporate security risks, balancing security requirements with business and operational needs.
- Lead technical security initiatives from design and implementation through ongoing operations.
- Partner with IT and Engineering to establish scalable security standards and practical guardrails.
- Evaluate and implement security tooling while maintaining direct ownership of configuration and operations.
Qualifications
- 5+ years of hands-on experience in corporate security engineering, IT security, or enterprise security infrastructure, ideally in a high-growth technology environment.
- Proven experience personally implementing, configuring, troubleshooting, and operating corporate security systems.
- Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management.
- Hands-on experience with endpoint management and security tools, including Intune/MDM, device compliance, and EDR.
- Experience securing SaaS applications, managing permissions, and implementing Zero Trust access principles.
- Proficiency in scripting and automation using Python, JavaScript, PowerShell, or similar languages, including API integrations.
- Familiarity with security monitoring, incident investigation, and remediation of compromised accounts or devices.
- Strong security judgment and the ability to independently identify, prioritize, and resolve high-impact risks.
- Broad technical expertise across corporate security infrastructure rather than specialization in a single area such as IAM, SOC, or endpoint management.
Skills
Required:Identity & Access ManagementEndpoint SecurityZero TrustAutomation & Scripting
Benefits
- Base Salary: $200,000 - $300,000
- Equity in the form of stock options
- Comprehensive benefits package
- Ambitious AI product work with an international team
- Significant ownership and opportunities for professional growth
- Hybrid role requiring three days in the San Francisco Bay Area office per week
Last updated Oct 25, 2026. Interested? Apply on the company site.
About Higgsfield AI
Higgsfield AI — AI-native creative suite
Create images, videos, and voice content with Higgsfield AI from text prompts or references. Edit and upscale media, automate creative workflows with its AI agent, and generate content on web and mobile.
AI-native creative suiteAppsSeedanceSeedreamMCP & CLIGemini Omni FlashCinema StudioOriginal Series
More open roles at Higgsfield AI
- Member of Technical Staff, ML SecurityyesterdayHybrid (San Francisco Bay Area, USA) · Product Engineering
- Product Manager (Product Growth)yesterdayAlmaty, Kazakhstan · Product Growth
- Member of Technical Staff, Product SecurityyesterdayHybrid (San Francisco Bay Area, USA) · Product Engineering
- Software Engineer, Business EngineeringyesterdayAlmaty, Kazakhstan · Product Engineering
- Member of Technical Staff, Enterprise SecurityyesterdayHybrid (San Francisco Bay Area, USA) · Product Engineering