Member of Technical Staff, Product Security
Higgsfield1 day ago
Base Salary
$200k - $300k/yr
Responsibilities
- Conduct hands-on penetration testing of web applications, APIs, administrative interfaces, agentic systems, and AI-powered applications.
- Discover, validate, exploit, prioritize, and retest security vulnerabilities, including authentication, authorization, and multi-tenant isolation issues.
- Perform threat modeling, architecture reviews, and security-focused code reviews with Product and Engineering teams.
- Trace vulnerabilities to root causes and collaborate with engineers on lasting remediation.
- Build security tooling, automated checks, secure development standards, and preventive controls across development workflows.
- Apply cloud, container, and infrastructure security knowledge to investigate application-stack vulnerabilities.
- Own security findings through remediation and help define security practices for emerging AI technologies.
Requirements
- At least 5 years of hands-on experience in product security, application security, penetration testing, or vulnerability research.
- A proven record of independently discovering and exploiting real vulnerabilities through application security work, bug bounty programs, or security research.
- Deep understanding of web application and API security, including authentication, authorization, and multi-tenant isolation.
- Ability to read and analyze modern codebases, identify root causes, and collaborate with engineers on remediation.
- Experience with threat modeling, secure design reviews, and hands-on penetration testing.
- Proficiency in scripting or programming languages such as Python, JavaScript, TypeScript, or Go.
- Familiarity with cloud infrastructure, containers, and modern application architectures.
- Ability to translate security findings into scalable engineering controls and automated checks.
- Strong technical judgment, independent problem-solving skills, and a proactive approach to identifying security risks.
Benefits
- Base salary range of $200,000–$300,000 depending on experience, skills, scope, and location.
- Bonus eligibility and potential participation in the company's discretionary annual bonus program.
- Eligibility to participate in the company's stock option program.
- Medical, dental, and vision insurance.
- Competitive 401(k) retirement plan with company matching and additional benefits and perks.
- Hybrid work in the San Francisco Bay Area, with three full days per week in the San Francisco office and remaining days remote.
- Opportunity to work on ambitious AI products with an experienced international team, with significant ownership and professional growth opportunities.
Tech Stack
Categories
About Higgsfield
Higgsfield builds generative AI tools for video and image creation used by creators, brands, and social media teams to produce content at scale. The company offers a studio-style app and AI-powered workflows for generation, editing, and marketing automation. Founded in 2023 and headquartered in San Francisco, it is privately held.