Member of Technical Staff, Infrastructure Security
- Compensation
- $200K–$300K / yr
- Location
- San Francisco Bay Area, USA
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 5+ years of hands-on experience in corporate security engineering, IT security, or enterprise security infrastructure, ideally in a high-growth technology environment.
- Proven experience personally implementing, configuring, troubleshooting, and operating corporate security systems.
- Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management.
- Hands-on experience with endpoint management and security tools, including Intune/MDM, device compliance, and EDR.
- Experience securing SaaS applications, managing permissions, and implementing Zero Trust access principles.
- Proficiency in scripting and automation using Python, JavaScript, PowerShell, or similar languages, including API integrations.
- Familiarity with security monitoring, incident investigation, and remediation of compromised accounts or devices.
- Strong security judgment and the ability to independently identify, prioritize, and resolve high-impact risks.
- Broad technical expertise across corporate security infrastructure rather than specialization in a single area such as IAM, SOC, or endpoint management.
Full description
Why work at Higgsfield AI?
Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.
We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.
Role Overview
Higgsfield AI is looking for a hands-on Member of Technical Staff, Infrastructure Security to build, secure, and operate the systems that protect our corporate infrastructure, employee devices, identities, and applications.
As we scale globally, you'll own the technical implementation of security controls across identity and access management, endpoint security, SaaS applications, and corporate networks.
Working closely with IT, Security, and Engineering, you'll identify vulnerabilities, implement practical solutions, and automate security operations. This is a highly technical, hands-on role where you'll personally configure, troubleshoot, and maintain critical security systems rather than primarily managing vendors or directing other teams.
We're looking for a well-rounded security engineer with strong technical judgment who can prioritize risks, move quickly, and build scalable security solutions without creating unnecessary friction.
What You'll Do
Identity & Access Security
- Design, implement, and maintain identity and access controls across Microsoft Entra ID and corporate applications.
- Configure and manage SSO/SAML, SCIM provisioning, MFA, Conditional Access, and role-based access controls (RBAC).
- Secure and automate employee joiner, mover, and leaver (JML) workflows.
- Implement least-privilege access and strengthen authentication and authorization practices.
Endpoint & Corporate Application Security
- Own endpoint security controls across corporate devices, including Microsoft Intune/MDM, device compliance, and endpoint detection and response (EDR).
- Secure SaaS applications through access management, permissions, provisioning, and configuration reviews.
- Design and implement Zero Trust access controls based on user identity, device posture, and least-privilege principles.
- Identify and remediate security gaps across corporate systems and applications.
Security Automation & Incident Response
- Build scripts, API integrations, and automated workflows to improve security operations and reduce manual processes.