Security Infrastructure Engineer (Almaty)

Higgsfield AI

Almaty, KazakhstanJobNo compensation foundPosted 1mo agoVerified open 3 days ago

Evaluate my fit

Most applications go out cold — see where you stand first. No sign-up to start.

Don't just apply. Show up ready.

Olive works from this exact posting — no sign-up to start.

Evaluate your fitSee where you stand — strengths, gaps, and what to fix first.Get started →Tailor your résuméRewritten against this posting, with a diff of every change.Get started →Practice the interviewA voice mock interview built from this job description.Get started →

At a glance

Compensation

No compensation found

Location

Almaty, Kazakhstan

Work Authorization

Not specified

Job overview

Higgsfield AI is hiring a Security Infrastructure Engineer (Almaty). Higgsfield AI is seeking a hands-on Infrastructure Security Engineer to lead security efforts across its cloud and ML infrastructure. This role involves owning immediate implementation and long-term operational responsibility for cloud and ML infrastructure security, vulnerability management, monitoring, and access governance. The engineer will work cross-functionally with Security, DevOps, and ML Engineering teams to secure the platform that trains models and serves millions of generations daily.

Key focus areas include Evaluate, implement, and maintain cloud security tooling, Own infrastructure and container vulnerability management across cloud environments, and Drive remediation of vulnerabilities.

Successful candidates bring 7+ Years Infrastructure Security Experience, Deep Hands‑On Experience Securing Major Cloud Provider, and Experience Securing ML Workloads. Important skills include Cloud Security Tooling, Infrastructure Vulnerability Management, Container Vulnerability Management, Network Segmentation, Centralized Security Monitoring, and Access Governance. Preferred (not required): Sandboxing, Container Isolation, Secure Execution Environments, and CSPM Rollouts.

Skills & qualifications

RequiredNice to have

Skills

Cloud Security ToolingInfrastructure Vulnerability ManagementContainer Vulnerability ManagementNetwork SegmentationCentralized Security MonitoringAccess GovernanceCredential ManagementIAMInfrastructure SecuritySecurity EngineeringAWSKubernetesTerraformSecuring ML WorkloadsNetworking FundamentalsOperating Systems FundamentalsCryptography FundamentalsContainer Security PracticesCollaborationHigh AgencySandboxingContainer IsolationSecure Execution EnvironmentsCSPM RolloutsIncident ManagementSOC 2

Qualifications

7+ Years in Infrastructure Security or Security EngineeringExperience at High-Growth Startup

Full job description

Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.

We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.

Role Overview

We're looking for a hands-on Infrastructure Security Engineer to own security across our cloud and ML infrastructure — the platform that trains our models and serves millions of generations a day.

The work spans tenant isolation for user-deployed apps, GPU cluster security, and model protection from training pipeline to serving. You'll sit between Security, DevOps, and ML Engineering.

You'll own both immediate implementation work and long-term operational responsibility: cloud and ML infrastructure security, vulnerability management, monitoring, and access governance.

Key Responsibilities We are looking for someone with experience in scaling high-growth startups who can make an immediate impact in the following areas:

Cloud & Network Security

Evaluate, implement, and maintain cloud security tooling.
Own infrastructure and container vulnerability management across our cloud environments, and drive remediation.
Design and implement network segmentation to tighten internal security boundaries.
Build centralized security monitoring across cloud infrastructure.

Corporate Access Control

Own access governance and credential management across cloud and internal tooling.
Partner with Engineering, DevOps, and IT to raise identity and access management standards.

Technical Leadership:

Set the technical direction for infrastructure security and lead cross-functional projects turning the standards you set into tooling and guardrails engineers actually ship with.

Requirements:

Few people will match all of these. If you're strong on some and eager to learn the rest, apply anyway.

7+ years in infrastructure security or security engineering, including time at a high- growth startup.
Deep hands-on experience securing a major cloud provider and a container orchestrator, managed with infrastructure-as-code (AWS, Kubernetes, Terraform).
Experience securing ML workloads — training or inference infrastructure, GPU clusters, or model-serving platforms.
Solid networking, operating systems, and cryptography fundamentals.
Strong grasp of container and infrastructure security practices and vulnerability management.
Comfortable working cross-functionally with DevOps, Engineering, and ML teams; able to independently find and close security gaps.
High agency.

Nice to have

Experience with sandboxing, container isolation, or secure execution environments for untrusted code.
Experience with CSPM rollouts.
Incident response and security monitoring experience.
Familiarity with SOC 2 or similar frameworks.

What we offer:

Competitive base salary in USD
Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth.
On-site role in our Almaty office (we will relocate you from anywhere).

You've read the whole posting — now see how you match it.

Evaluate my fit