IT Security Engineer (SF Bay Area)

Menlo Ventures; San Francisco (CA); Hybrid; USD 165,000 - 230,000; Full time

Benefits offered by this job

Competitive salary

Stock options

Hybrid work

Job summary

Higgsfield AI in the San Francisco Bay Area is hiring a hands-on Security Engineer who will own corporate security across devices, identities and SaaS the company runs on. This role complements the Infrastructure Security Engineer and focuses on the people side of security.

You'll manage MDM and EDR across the fleet, run IdP provisioning (SSO/SAML/SCIM, MFA, conditional access), run phishing simulations, and work with IT and Engineering to maintain strong credential hygiene while enabling

Qualifications

• Hands-on experience running MDM and EDR at fleet scale.
• Production experience running an IdP: SSO/SAML/SCIM, MFA, and conditional access.
• Enough scripting to automate the repetitive parts (Python, PowerShell, or Bash).
• High agency.
• Working English.

Responsibilities

• Own MDM and EDR across the fleet, including enrollment, policy enforcement and lifecycle.
• Manage corporate identity and access: Entra SSO, MFA, conditional access, and offboarding.
• Lead awareness and response: phishing simulations and security training, manage approved apps.
• Collaborate with infrastructure security to feed signals into centralized detection and response.

Skills

MDM

EDR

SSO/SAML/SCIM

MFA

IdP management

Scripting (Python/PowerShell/Bash)

High agency

Working English

Job description

Why work at Higgsfield AI?

Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.

About the role

You’ll own corporate security: the devices, identities, and SaaS the company runs on. Sister role to the Infrastructure Security Engineer — they secure the cloud and ML platform; this role secures the people side.

Key Responsibilities

• Endpoints:
  • Own MDM across the fleet: enrollment, policy enforcement, compliance, device lifecycle.
  • Run EDR/XDR: detection, triage, and response on employee devices.
  • Set and maintain endpoint hardening standards with IT and Engineering.
• Corporate identity & access:
  • Own corporate identity: Entra SSO, MFA, conditional access.
  • Run joiner-mover-leaver: provisioning and same-day offboarding across all SaaS.
  • Administer a Password Management solution and drive credential hygiene.
• Awareness & response:
  • Security-review new SaaS before adoption; own the approved-app list; hunt shadow IT.
  • Secure the collaboration stack: email, Slack, file sharing.
  • AWARENESS & RESPONSE Run phishing simulations and onboarding security training.
• Partner with infrastructure security on centralized security monitoring: feed endpoint and identity signals into shared detection and response.

Requirements

• Hands-on experience running MDM and EDR at fleet scale.
• Production experience running an IdP: SSO/SAML/SCIM, MFA, and conditional access.
• Enough scripting to automate the repetitive parts (Python, PowerShell, or Bash).
• High agency.
• Working English.

Nice to have

• Familiarity with SOC 2.
• High-growth startup experience.

Compensation & Benefits

• We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth.
• Base Salary: The anticipated salary range for this role is $165 - $230k, depending on experience, skills, scope, and location.
• Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth.
• Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally.
• The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team.
• Significant ownership, direct impact, and opportunities for professional growth as the company scales.

This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams.

Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.