Product Security Engineer: Offensive Security & Secure Design

Higgsfield Inc.; San Francisco (CA); Hybrid; USD 200,000 - 300,000; Full time

Benefits offered by this job

Equity program

401(k) matching

Medical insurance

Dental insurance

Vision insurance

Bonus eligibility

Job summary

Higgsfield AI in the San Francisco Bay Area is seeking a hands-on Member of Technical Staff, Product Security to identify and eliminate security vulnerabilities across our AI products and platforms. You will conduct offensive security testing and work with engineers to build secure features.

You will map attack surfaces, perform threat modeling, and translate findings into scalable security standards and automated checks, enabling rapid product development without compromising security.

Qualifications

• 5+ years of hands-on product security, application security, penetration testing, or vulnerability research.
• Proven track record of independently discovering real vulnerabilities in production systems.
• Deep understanding of web application and API security (auth, authorization, multi-tenant isolation).
• Strong ability to read and analyze modern codebases and collaborate with engineers on remediation.
• Experience with threat modeling, secure design reviews, and hands-on testing.
• Proficiency in Python, JavaScript, TypeScript, or Go.
• Familiarity with cloud infrastructure, containers, and modern app architectures.
• Ability to translate security findings into scalable engineering controls and automated checks.

Responsibilities

• Conduct hands-on penetration testing of web apps, APIs, and admin interfaces.
• Identify security risks across agentic systems and AI-powered applications.
• Map attack surfaces, uncover auth and multi-tenant vulnerabilities.
• Develop PoCs, validate findings, and retest remediation.
• Partner with Engineering to identify and prevent security flaws early in development.
• Perform threat modeling and secure design reviews.

Job description

Higgsfield AI in the San Francisco Bay Area is seeking a hands-on Member of Technical Staff, Product Security to identify and eliminate security vulnerabilities across our AI products and platforms. You will conduct offensive security testing and work with engineers to build secure features.

You will map attack surfaces, perform threat modeling, and translate findings into scalable security standards and automated checks, enabling rapid product development without compromising security.