IT Security Engineer (Almaty)

Higgsfield AI

San Francisco, CAJobPosted 2mo agoStill listed 4 days ago

San Francisco, CAJobNo compensation foundPosted 2mo agoStill listed 4 days ago

Evaluate my fit

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this. New roles like this one near San Francisco, CA, by email.

Don't just apply. Show up ready.

Olive works from this exact posting.

Evaluate your fitSee where you stand — strengths, gaps, and what to fix first.
Tailor your résuméRewritten against this posting, every reworded bullet shown before and after.
Practice the interviewA voice mock interview built from this job description.

Evaluate your fitSee where you stand — strengths, gaps, and what to fix first.Get started →Tailor your résuméRewritten against this posting, every reworded bullet shown before and after.Get started →Practice the interviewA voice mock interview built from this job description.Get started →

At a glance

Compensation

No compensation found

Location

San Francisco, CA

Work Authorization

Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

Higgsfield AI is hiring an IT Security Engineer (Almaty). Higgsfield AI is seeking an IT Security Engineer to own corporate security, focusing on devices, identities, and SaaS. This role involves managing MDM, EDR/XDR, corporate identity and access, and security awareness and response. The ideal candidate will have experience scaling high-growth startups and making an immediate impact.

Key focus areas include Own MDM across the fleet: enrollment, policy enforcement, compliance, device lifecycle., Run EDR/XDR: detection, triage, and response on employee devices., and Set and maintain endpoint hardening standards with IT and Engineering..

Successful candidates bring Hands‑On Experience Running MDM And EDR At Fleet Scale, Production Experience Running An IdP SSO/SAML/SCIM MFA And Conditional Access, and Working English. Important skills include MDM, EDR, MFA, Conditional Access, IdP, and SSO. Preferred (not required): XDR, Endpoint Hardening, SaaS Provisioning, and Password Management.

Skills & qualifications

RequiredNice to have

Skills

MDMEDRMFAConditional AccessIdPSSOSAMLSCIMHigh AgencyWorking EnglishXDREndpoint HardeningSaaS ProvisioningPassword ManagementSecurity ReviewShadow IT HuntingCollaboration Stack SecurityPhishing SimulationsSecurity TrainingSecurity MonitoringPythonPowerShellBashSOC 2

Qualifications

Experience Running MDM at Fleet ScaleProduction Experience Running IdPHigh-Growth Startup Experience

Full job description

Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.

We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.

About the role You'll own corporate security: the devices, identities, and SaaS the company runs on. Sister role to theInfrastructure Security Engineer — they secure the cloud and ML platform; this role secures the people side.

Key Responsibilities We are looking for someone with experience in scaling high-growth startups who can make an immediate impact in the following areas:

Endpoints:

Own MDM across the fleet: enrollment, policy enforcement, compliance, device lifecycle.
Run EDR/XDR: detection, triage, and response on employee devices.
Set and maintain endpoint hardening standards with IT and Engineering.

Corporate identity & access

Own corporate identity: Entra SSO, MFA, conditional access.
Run joiner-mover-leaver: provisioning and same-day offboarding across all SaaS.
Administer a Password Management solution and drive credential hygiene.

Awareness & response

Security-review new SaaS before adoption; own the approved-app list; hunt shadow IT.
Secure the collaboration stack: email, Slack, file sharing.
Run phishing simulations and onboarding security training.
Partner with infrastructure security on centralized security monitoring: feed endpoint and identity signals into shared detection and response.

Requirements:

Hands-on experience running MDM and EDR at fleet scale.
Production experience running an IdP: SSO/SAML/SCIM, MFA, and conditional access.
Enough scripting to automate the repetitive parts (Python, PowerShell, or Bash).
High agency.
Working English.

Nice to have:

Familiarity with SOC 2.
High-growth startup experience.

What we offer:

Competitive base salary in USD
Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth.
On-site role in our Almaty office (we will relocate you from anywhere).

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.

Evaluate my fit