Higgsfield
Member of Technical Staff, Product Security
$200K–$300K
San Francisco Bay Area, USA · Hybrid · Staff · Full-time · Posted Oct 23, 2026
- Experience
- 5+ years in product security, application security, penetration testing, or vulnerability research.
About the job
Secures Higgsfield’s AI products and platforms by testing for vulnerabilities, improving product design, and building reusable security controls.
What you'll do
- Penetration-test products, APIs, and AI systems; identify vulnerabilities and validate fixes.
- Partner with engineering on threat modeling, architecture and code reviews, and remediation.
- Build security tooling, standards, and automated controls for development and CI/CD workflows.
What they ask for
- Proven ability to independently discover and exploit real vulnerabilities.
- Deep understanding of web application and API security, including authentication, authorization, and multi-tenant isolation.
- Experience with threat modeling, secure design reviews, and hands-on penetration testing.
- Proficiency in a scripting or programming language such as Python, JavaScript, TypeScript, or Go.
Pay
$200,000 - $300,000 USD base salary
Tools
Python, JavaScript, TypeScript, Go, MCP servers, CI/CD, SSO
AI focus
Secures agentic systems, code-generating agents, generative AI models, and AI-powered applications.
Model-written summary · the original posting is authoritative