Staff Product Security Engineer: Offensive Testing

Higgsfieldai; San Francisco (CA); Hybrid; USD 200,000 - 300,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Stock options

Job summary

Higgsfield AI is seeking a hands-on Member of Technical Staff, Product Security to identify and eliminate security vulnerabilities across our AI products and platforms. You will conduct offensive security tests, map attack surfaces, and drive fixes with engineers to secure new features before production.

Role involves threat modeling, secure design reviews, and building scalable security standards and automated controls in a hybrid SF Bay Area setting.

Qualifications

• 5+ years of hands-on product security, application security, or vulnerability research.

Responsibilities

• Conduct hands-on penetration testing of new products and features (web apps, APIs, admin interfaces).
• Identify security risks across agentic systems and AI-powered apps.
• Map attack surfaces; uncover authorization, authentication, and multi-tenant isolation vulnerabilities.
• Develop PoCs, validate findings, and retest remediation.
• Partner with Engineering to prevent security flaws during design.
• Conduct threat modeling, architecture reviews, and security-focused code reviews.
• Analyze codebase to trace vulnerabilities to root cause and recommend fixes.
• Assess risks across AI products, user apps, and enterprise features like SSO and RBAC.
• Translate findings into automated security controls and checks.
• Own findings from discovery to remediation with engineers.

Skills

Penetration testing

Web security

APIs security

Threat modeling

Code reviews

Python

JavaScript/TypeScript/Go

Cloud infrastructure

CI/CD security

Tools

Security testing tools

Job description

Higgsfield AI is seeking a hands-on Member of Technical Staff, Product Security to identify and eliminate security vulnerabilities across our AI products and platforms. You will conduct offensive security tests, map attack surfaces, and drive fixes with engineers to secure new features before production.

Role involves threat modeling, secure design reviews, and building scalable security standards and automated controls in a hybrid SF Bay Area setting.