← All roles

Application Security Engineer

Higgsfield AI· Product Engineering
Apply on company site
Almaty, KazakhstanFull-timePosted 3mo ago

About the role

Role focusing on identifying and remediating security vulnerabilities in Higgsfield AI's new features and products, with hands-on pentesting, threat modeling, and collaboration with engineering to bake in security from design through release.

Responsibilities

  • Pentest new features and products pre-release: web, APIs, admin surfaces.
  • Work out the attack surface of each new feature yourself.
  • Hunt authorization flaws across multi-tenant APIs and retest fixes.
  • Join design and code reviews early to ensure flaws are addressed before build.
  • Turn recurring findings into guardrails—paved-road standards and automated checks—so a bug class dies once instead of resurfacing every release.
  • Bring a working repro to the team that owns the code and see the fix through.

Qualifications

  • A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research.
  • Ability to read modern codebases, trace a bug to root cause, and discuss the fix with engineers who wrote it.
  • A threat-modeling instinct for spotting weak spots in design or architecture before a line is written.
  • Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on.
  • High agency.
  • Working English.

Skills

Required:PentestingThreat modelingCode reading and debuggingCloud and container fundamentals

Benefits

  • Competitive base salary in USD
  • Equity: participation in the company’s stock option program
  • On-site role in Almaty office (relocation provided)
Last updated Aug 16, 2026. Interested? Apply on the company site.
Higgsfield AI logo

About Higgsfield AI

Higgsfield AI — AI-native creative suite

Create images, videos, and voice content with Higgsfield AI from text prompts or references. Edit and upscale media, automate creative workflows with its AI agent, and generate content on web and mobile.

AI-native creative suiteAppsSeedanceSeedreamMCP & CLIGemini Omni FlashCinema StudioOriginal Series
Company profileWebsite

More open roles at Higgsfield AI