Member of Technical Staff, Enterprise Security

Why work at Higgsfield AI?

Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.

We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.

Role Overview

Higgsfield AI is looking for a hands-on Member of Technical Staff, Enterprise Security to own security across our corporate systems, employee devices, identities, and SaaS applications.

As we scale globally, you'll secure the systems our workforce relies on, from endpoint management and identity governance to threat detection and response.

Working closely with IT, Infrastructure Security, and Engineering, you'll implement technical controls, automate security operations, and strengthen access governance. This is a hands-on engineering role requiring someone who personally builds, configures, and operates security systems.

We're looking for someone with broad corporate security expertise, strong technical judgment, and the ability to prioritize meaningful risks in a fast-moving environment.

What You'll Do

• Endpoint & Device Security
• Own endpoint security across corporate devices using Microsoft Intune/MDM, including enrollment, compliance, and device lifecycle management.
• Implement and operate EDR/XDR capabilities, including threat detection, investigation, and remediation.
• Establish endpoint hardening standards and security baselines in partnership with IT and Engineering.
• Identity & Access Security
• Own corporate identity infrastructure across Microsoft Entra ID, including SSO/SAML, SCIM, MFA, Conditional Access, and RBAC.
• Manage joiner, mover, and leaver (JML) workflows, ensuring secure provisioning and timely offboarding across SaaS applications.
• Administer password management, privileged access, and credential security controls.
• Conduct access reviews and implement least-privilege and Zero Trust principles.
• SaaS & Corporate Application Security
• Evaluate new SaaS applications, maintain approved application standards, and identify shadow IT.
• Secure corporate collaboration tools, including email, Slack, and file-sharing platforms.
• Review application configurations, permissions, and authentication controls.
• Lead security awareness initiatives, including phishing simulations and employee training.
• Detection, Response & Automation
• Monitor and investigate security alerts across identity, endpoints, and corporate applications.
• Build detection capabilities for compromised accounts, suspicious activity, and endpoint threats.
• Automate provisioning, access reviews, compliance checks, and security workflows using scripts and APIs.
• Partner with Infrastructure Security to integrate endpoint and identity signals into centralized monitoring.
• Lead incident investigation, containment, and remediation.
• Technical Ownership & Leadership
• Identify and prioritize enterprise security risks based on business impact.
• Lead security initiatives from technical design through implementation and ongoing operations.
• Establish scalable security standards and practical engineering controls.
• Partner cross-functionally to strengthen security without slowing business operations.

What We're Looking For

• 4+ years of hands-on experience in enterprise security, corporate IT security, or security engineering, ideally in a high-growth technology environment.
• Proven experience personally implementing, configuring, and operating corporate security systems.
• Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management.
• Hands-on experience with Microsoft Intune/MDM, endpoint compliance, and EDR/XDR.
• Experience securing SaaS applications, corporate collaboration tools, and privileged access.
• Proficiency in scripting and automation using Python, PowerShell, Bash, or similar languages.
• Experience with security monitoring, incident investigation, and remediation.
• Strong understanding of Zero Trust, least-privilege access, and corporate security practices.
• Sound technical judgment, independent problem-solving skills, and broad expertise across corporate security domains.

Base Salary:

The anticipated salary range for this role is

$200,000 - $300,000 depending on experience, skills, scope, and location.

Bonus:

This role is Bonus eligible and may participate in the Company's discretionary annual bonus program.

Equity:

In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth.