Security Infrastructure Engineer (SF Bay Area)

Higgsfield AI; San Francisco (CA); Hybrid; USD 165,000 - 187,000; Full time

Benefits offered by this job

Equity program

Comprehensive benefits

Hybrid work model

Job summary

Higgsfield AI in the San Francisco Bay Area is seeking a hands-on Infrastructure Security Engineer to own security across our cloud and ML platforms, including training pipelines, GPU clusters, and containerized workloads. You’ll work between Security, DevOps, and ML Engineering to implement both quick fixes and long‑term safeguards.

This hybrid role requires three days per week in the SF office, with the rest remote.

Qualifications

• 7+ years in infrastructure security or security engineering.
• Deep hands-on experience securing AWS, Kubernetes, and Terraform.
• Experience securing ML workloads (training or inference pipelines).
• Strong networking, OS, and cryptography fundamentals.
• Experience with IAM and cross-functional security practices.
• High agency and ability to close security gaps.

Responsibilities

• Evaluate, implement, and maintain cloud security tooling.
• Own vulnerability management across cloud environments.
• Design and implement network segmentation to tighten security boundaries.
• Build centralized security monitoring across cloud infrastructure.

Skills

Infra security experience

Cloud security

Kubernetes

Terraform

ML security

IAM / access mgmt

Networking fundamentals

Secure coding practices

Tools

AWS

Kubernetes

Terraform

GPU clusters

Job description

Why work at Higgsfield AI?

Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.

Role Overview

We're looking for a hands-on Infrastructure Security Engineer to own security across our cloud and ML infrastructure — the platform that trains our models and serves millions of generations a day. The work spans tenant isolation for user-deployed apps, GPU cluster security, and model protection from training pipeline to serving. You'll sit between Security, DevOps, and ML Engineering.

You’ll own both immediate implementation work and long-term operational responsibility: cloud and ML infrastructure security, vulnerability management, monitoring, and access governance.

Key Responsibilities

Cloud & Network Security

• Evaluate, implement, and maintain cloud security tooling.
• Own infrastructure and container vulnerability management across our cloud environments, and drive remediation.
• Design and implement network segmentation to tighten internal security boundaries.
• Build centralized security monitoring across cloud infrastructure.

Corporate Access Control

• Own access governance and credential management across cloud and internal tooling.
• Partner with Engineering, DevOps, and IT to raise identity and access management standards.

Technical Leadership

• Set the technical direction for infrastructure security and lead cross-functional projects turning the standards you set into tooling and guardrails engineers actually ship with.

Requirements

• 7+ years in infrastructure security or security engineering, including time at a high- growth startup.
• Deep hands-on experience securing a major cloud provider and a container orchestrator, managed with infrastructure-as-code (AWS, Kubernetes, Terraform).
• Experience securing ML workloads — training or inference infrastructure, GPU clusters, or model-serving platforms.
• Solid networking, operating systems, and cryptography fundamentals.
• Strong grasp of container and infrastructure security practices and vulnerability management.
• Comfortable working cross-functionally with DevOps, Engineering, and ML teams; able to independently find and close security gaps.
• High agency.

Nice to have

• Experience with sandboxing, container isolation, or secure execution environments for untrusted code.
• Experience with CSPM rollouts.
• Incident response and security monitoring experience.l
• Familiarity with SOC 2 or similar frameworks.

Compensation & Benefits

• We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth.
• Base Salary: The anticipated salary range for this role is $165 - $187k, depending on experience, skills, scope, and location.
• Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth.
• Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally
• The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team.
• Significant ownership, direct impact, and opportunities for professional growth as the company scales.

This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams.
Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.
Compensation Range: $165K - $187K