Инфраструктура и безопасность вакансии - гибрид

Location: San Francisco Bay Area, USA Workplace: Hybrid Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. About the role: Higgsfield AI is looking for a hands-on Member of Technical Staff, Product Security to identify and eliminate security vulnerabilities across our rapidly evolving AI products and platforms. As we build agentic systems, code-generating agents, generative AI models, and enterprise applications, you'll play a critical role in securing new features before they reach production. Working closely with Product and Engineering, you'll conduct offensive security testing, identify architectural weaknesses, and drive fixes to their root cause. You'll also turn recurring vulnerabilities into scalable security standards and automated controls. We're looking for someone with a proven track record of finding real vulnerabilities in production systems, strong technical judgment, and the ability to work directly with engineers to build more secure products. WHAT YOU'LL DO OFFENSIVE SECURITY & VULNERABILITY RESEARCH - Conduct hands-on penetration testing of new products and features, including web applications, APIs, and administrative interfaces. - Identify security risks across agentic systems, MCP servers, code-generating agents, and AI-powered applications. - Independently map attack surfaces and uncover authorization, authentication, and multi-tenant isolation vulnerabilities. - Develop proof-of-concept exploits, validate findings, and retest remediation efforts. SECURE DESIGN & APPLICATION SECURITY - Partner with Engineering early in product development to identify and prevent security flaws before release. - Conduct threat modeling, architecture reviews, and security-focused code reviews. - Analyze complex codebases to trace vulnerabilities to their root cause and recommend effective fixes. - Assess security risks across generative AI products, user-deployed applications, and enterprise features such as SSO and role-based access controls. SECURITY ENGINEERING & AUTOMATION - Translate recurring vulnerabilities into secure development standards, reusable controls, and automated security checks. - Build security tooling and integrate preventive controls into development and CI/CD workflows. - Identify systemic weaknesses and implement solutions that prevent entire classes of vulnerabilities. - Apply cloud, container, and infrastructure security knowledge to investigate vulnerabilities across the application stack. TECHNICAL OWNERSHIP & COLLABORATION - Own security findings from discovery through remediation, working directly with engineers to implement lasting fixes. - Prioritize vulnerabilities based on exploitability, business impact, and real-world risk. - Establish practical security standards that enable rapid product development without compromising security. - Help define security practices for emerging AI technologies and new product architectures. WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in product security, application security, penetration testing, or vulnerability research. - Proven track record of independently discovering and exploiting real vulnerabilities through application security work, bug bounty programs, or security research. - Deep understanding of web application and API security, including authentication, authorization, and multi-tenant isolation. - Strong ability to read and analyze modern codebases, identify root causes, and collaborate with engineers on remediation. - Experience conducting threat modeling, secure design reviews, and hands-on penetration testing. - Proficiency in scripting or programming languages such as Python, JavaScript, TypeScript, or Go. - Familiarity with cloud infrastructure, containers, and modern application architectures. - Ability to translate security findings into scalable engineering controls and automated checks. - Strong technical judgment, independent problem-solving skills, and a proactive approach to identifying security risks. Compensation & Benefits - We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. - Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. • Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program. - Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. - Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks. - The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. - Significant ownership, direct impact, and opportunities for professional growth as the company scales. This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Location: San Francisco Bay Area, USA Workplace: Hybrid Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. Role Overview Higgsfield AI is looking for a hands-on Member of Technical Staff, Enterprise Security to own security across our corporate systems, employee devices, identities, and SaaS applications. As we scale globally, you'll secure the systems our workforce relies on, from endpoint management and identity governance to threat detection and response. Working closely with IT, Infrastructure Security, and Engineering, you'll implement technical controls, automate security operations, and strengthen access governance. This is a hands-on engineering role requiring someone who personally builds, configures, and operates security systems. We're looking for someone with broad corporate security expertise, strong technical judgment, and the ability to prioritize meaningful risks in a fast-moving environment. WHAT YOU'LL DO ENDPOINT & DEVICE SECURITY - Own endpoint security across corporate devices using Microsoft Intune/MDM, including enrollment, compliance, and device lifecycle management. - Implement and operate EDR/XDR capabilities, including threat detection, investigation, and remediation. - Establish endpoint hardening standards and security baselines in partnership with IT and Engineering. IDENTITY & ACCESS SECURITY - Own corporate identity infrastructure across Microsoft Entra ID, including SSO/SAML, SCIM, MFA, Conditional Access, and RBAC. - Manage joiner, mover, and leaver (JML) workflows, ensuring secure provisioning and timely offboarding across SaaS applications. - Administer password management, privileged access, and credential security controls. - Conduct access reviews and implement least-privilege and Zero Trust principles. SAAS & CORPORATE APPLICATION SECURITY - Evaluate new SaaS applications, maintain approved application standards, and identify shadow IT. - Secure corporate collaboration tools, including email, Slack, and file-sharing platforms. - Review application configurations, permissions, and authentication controls. - Lead security awareness initiatives, including phishing simulations and employee training. DETECTION, RESPONSE & AUTOMATION - Monitor and investigate security alerts across identity, endpoints, and corporate applications. - Build detection capabilities for compromised accounts, suspicious activity, and endpoint threats. - Automate provisioning, access reviews, compliance checks, and security workflows using scripts and APIs. - Partner with Infrastructure Security to integrate endpoint and identity signals into centralized monitoring. - Lead incident investigation, containment, and remediation. TECHNICAL OWNERSHIP & LEADERSHIP - Identify and prioritize enterprise security risks based on business impact. - Lead security initiatives from technical design through implementation and ongoing operations. - Establish scalable security standards and practical engineering controls. - Partner cross-functionally to strengthen security without slowing business operations. WHAT WE'RE LOOKING FOR - 4+ years of hands-on experience in enterprise security, corporate IT security, or security engineering, ideally in a high-growth technology environment. - Proven experience personally implementing, configuring, and operating corporate security systems. - Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management. - Hands-on experience with Microsoft Intune/MDM, endpoint compliance, and EDR/XDR. - Experience securing SaaS applications, corporate collaboration tools, and privileged access. - Proficiency in scripting and automation using Python, PowerShell, Bash, or similar languages. - Experience with security monitoring, incident investigation, and remediation. - Strong understanding of Zero Trust, least-privilege access, and corporate security practices. - Sound technical judgment, independent problem-solving skills, and broad expertise across corporate security domains. Compensation & Benefits - We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. - Base Salary: The anticipated salary range for this role is $200,000 - $300,000 depending on experience, skills, scope, and location. • Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program. - Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. - Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks. - The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. - Significant ownership, direct impact, and opportunities for professional growth as the company scales. This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

webAI is looking for a Senior DevOps Engineer to design, build, and scale secure infrastructure for AI workloads across cloud and edge environments.

• Поддерживать и развивать средства сетевой защиты: FW/NGFW, IDS/IPS, Proxy, HBFW и другие. • Заниматься операционной работой по сетевым доступам: ревью, выдача, траблшутинг.

• Поддерживать Linux, Kubernetes и сервисы в нескольких площадках и окружениях. • Обеспечивать доступность тракта ASIC → Miner Agent / gateway / Stratum → upstream.

Разработка и развитие компонентов ML-платформы и инфраструктурных сервисов. Автоматизация процессов запуска, сопровождения и мониторинга ML/HPC workloads.

• Расследовать фрод-инциденты: ➡Собирать и анализировать данные по инциденту (анализ логов/других технических данных пользователей);

Задачи: — не указаны явно Требования: — принципы методологии DevOps — операционные системы семейства Linux — системы контроля версий (Git) — инструменты контейнеризации (Docker) — системы управления конфигурациями (Ansible) — технологии оркестрации (Kubernetes) на базовом уровне — разговорный английский на уровне В1+ и выше — будут плюсом более глубокие знания одной или нескольких тем Условия: — полная занятость — график 5/2 — формат работы гибрид или офис (Минск)

Участие в разработке и сопровождении внутренней платформы сборки продукта. Разработка инструментов автоматизации и внутренних сервисов на Python.

— Provide IT support to employees (Windows / macOS). — Administer Google Workspace, Entra ID / Active Directory.

– Оказание удаленной технической поддержки (посредством телефонных звонков) и мониторинг работы кассовых систем и оборудования в предприятиях; – Оперативное решение технических проблем, взаимодействие с сотрудниками предприятий для устранения неисправностей;

Anthropic is looking for an Applied AI Architect Security Specialist to advise enterprise customers and deploy Claude-powered security workloads.

Администрирование и настройка Linux-систем (RHEL, CentOS, Debian, Ubuntu); Подготовка инфраструктуры под задачи различных проектов;

Design and support air-gapped deployment environments for LLM-based systems. Deploy and optimize LLM workloads on GPU infrastructure.

- Выстраивать и поддерживать процесс инвентаризации инфраструктурных и endpoint-активов. - Реализовывать и развивать контроль сетевой безопасности: access control, сегментация, мониторинг.

Друзья, мы ищем Senior DevOps Engineer для развития государственной платформы для проведения закупок малого объема, соблюдая требования законодательства и обеспечивая стабильную работу при высокой нагрузке. • Высшее техническое образование.

- Участие в Agile-командах и проектных группах в качестве эксперта по защите информации. - Формирование и обоснование требований информационной безопасности к ИТ-системам.

Стратегическая цель – к 2030 году стать национальным производителем программных продуктов No1 Обязанности: Отслеживание, оценка и решение задач в рамках технологического стека продуктов компании, приоритет: ОС Astra Linux, ALD Pro, Rupost, Desktop X, Workspad; Приём входящих звонков с 18:00 до 24:00 и оказание технических консультаций согласно регламенту;