Member of Technical Staff, Infrastructure Security

Location: San Francisco Bay Area, USA Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ROLE OVERVIEW Higgsfield AI is looking for a hands-on Member of Technical Staff, Infrastructure Security to build, secure, and operate the systems that protect our corporate infrastructure, employee devices, identities, and applications. As we scale globally, you'll own the technical implementation of security controls across identity and access management, endpoint security, SaaS applications, and corporate networks. Working closely with IT, Security, and Engineering, you'll identify vulnerabilities, implement practical solutions, and automate security operations. This is a highly technical, hands-on role where you'll personally configure, troubleshoot, and maintain critical security systems rather than primarily managing vendors or directing other teams. We're looking for a well-rounded security engineer with strong technical judgment who can prioritize risks, move quickly, and build scalable security solutions without creating unnecessary friction. WHAT YOU'LL DO IDENTITY & ACCESS SECURITY - Design, implement, and maintain identity and access controls across Microsoft Entra ID and corporate applications. - Configure and manage SSO/SAML, SCIM provisioning, MFA, Conditional Access, and role-based access controls (RBAC). - Secure and automate employee joiner, mover, and leaver (JML) workflows. - Implement least-privilege access and strengthen authentication and authorization practices. ENDPOINT & CORPORATE APPLICATION SECURITY - Own endpoint security controls across corporate devices, including Microsoft Intune/MDM, device compliance, and endpoint detection and response (EDR). - Secure SaaS applications through access management, permissions, provisioning, and configuration reviews. - Design and implement Zero Trust access controls based on user identity, device posture, and least-privilege principles. - Identify and remediate security gaps across corporate systems and applications. SECURITY AUTOMATION & INCIDENT RESPONSE - Build scripts, API integrations, and automated workflows to improve security operations and reduce manual processes. - Develop and maintain security monitoring, alerting, and detection capabilities. - Investigate compromised accounts, suspicious activity, and endpoint security incidents, driving containment and remediation. - Troubleshoot security infrastructure issues and continuously improve technical controls. TECHNICAL OWNERSHIP & SECURITY ENGINEERING - Identify and prioritize corporate security risks, balancing security requirements with business and operational needs. - Lead technical security initiatives from design and implementation through ongoing operations. - Partner with IT and Engineering to establish scalable security standards and practical guardrails. - Evaluate and implement security tooling while maintaining direct ownership of configuration and operations. WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in corporate security engineering, IT security, or enterprise security infrastructure, ideally in a high-growth technology environment. - Proven experience personally implementing, configuring, troubleshooting, and operating corporate security systems. - Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management. - Hands-on experience with endpoint management and security tools, including Intune/MDM, device compliance, and EDR. - Experience securing SaaS applications, managing permissions, and implementing Zero Trust access principles. - Proficiency in scripting and automation using Python, JavaScript, PowerShell, or similar languages, including API integrations. - Familiarity with security monitoring, incident investigation, and remediation of compromised accounts or devices. - Strong security judgment and the ability to independently identify, prioritize, and resolve high-impact risks. - Broad technical expertise across corporate security infrastructure rather than specialization in a single area such as IAM, SOC, or endpoint management. COMPENSATION & BENEFITS • We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. • Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. • Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. • • Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally • The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. • Significant ownership, direct impact, and opportunities for professional growth as the company scales.   This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.