Principal Product Security Engineer Offensive Security

Fi; San Francisco (CA); Hybrid; USD 200.000 - 300.000; Vollzeit

Benefits dieser Stelle

Medical insurance

401(k) matching

Stock options

Hybrid work (SF Bay Area)

Career growth

Zusammenfassung

Higgsfield AI, based in the San Francisco Bay Area, seeks a hands-on Member of Technical Staff, Product Security to secure AI products and platforms. You will perform offensive security testing, identify architectural weaknesses, and drive fixes with engineers while transforming findings into scalable security standards and automated controls.

You will collaborate with Product and Engineering to design secure features from the ground up, perform threat modeling and code reviews, and help shape

Qualifikationen

• 5+ years of hands-on experience in product security, application security, penetration testing, or vulnerability research.
• Proven track record of independently discovering and exploiting real vulnerabilities.
• Deep understanding of web app and API security, including auth and multi-tenant isolation.
• Strong ability to read modern codebases and collaborate with engineers on remediation.

Aufgaben

• Conduct hands-on penetration testing of new products and features (web apps, APIs, admin interfaces).
• Identify security risks across agentic systems, MCP servers, code-generating agents, and AI apps.
• Map attack surfaces and uncover auth, authn, and multi-tenant isolation vulnerabilities.
• Develop PoC exploits, validate findings, and retest remediation efforts.

Kenntnisse

Penetration testing

Vulnerability research

Web security

Threat modeling

Python/JavaScript/TypeScript/Go

Cloud & container security

Jobbeschreibung

Higgsfield AI, based in the San Francisco Bay Area, seeks a hands-on Member of Technical Staff, Product Security to secure AI products and platforms. You will perform offensive security testing, identify architectural weaknesses, and drive fixes with engineers while transforming findings into scalable security standards and automated controls.

You will collaborate with Product and Engineering to design secure features from the ground up, perform threat modeling and code reviews, and help shape