IT Security Engineer (Almaty)

Higgsfield· Almaty, Kazakhstan, San Francisco Bay Area, California· ashby· zverejnené 20. 07. 2026
Povinné:PythonCloudAISecurity

WHY WORK AT HIGGSFIELD AI?

Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.

We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.

ABOUT THE ROLE

You'll own corporate security: the devices, identities, and SaaS the company runs on. Sister role to theInfrastructure Security Engineer — they secure the cloud and ML platform; this role secures the people side.

KEY RESPONSIBILITIES

We are looking for someone with experience in scaling high-growth startups who can make an immediate impact in the following areas:

Endpoints:

  • Own MDM across the fleet: enrollment, policy enforcement, compliance, device lifecycle.
  • Run EDR/XDR: detection, triage, and response on employee devices.
  • Set and maintain endpoint hardening standards with IT and Engineering.

Corporate identity & access

  • Own corporate identity: Entra SSO, MFA, conditional access.
  • Run joiner-mover-leaver: provisioning and same-day offboarding across all SaaS.
  • Administer a Password Management solution and drive credential hygiene.

Awareness & response

  • Security-review new SaaS before adoption; own the approved-app list; hunt shadow IT.
  • Secure the collaboration stack: email, Slack, file sharing. AWARENESS & RESPONSE
  • Run phishing simulations and onboarding security training.
  • Partner with infrastructure security on centralized security monitoring: feed endpoint and identity signals into shared detection and response.

Requirements:

  • Hands-on experience running MDM and EDR at fleet scale.
  • Production experience running an IdP: SSO/SAML/SCIM, MFA, and conditional access.
  • Enough scripting to automate the repetitive parts (Python, PowerShell, or Bash).
  • High agency.
  • Working English.

Nice to have:

  • Familiarity with SOC 2.
  • High-growth startup experience.

WHAT WE OFFER:

  • Competitive base salary in USD
  • Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth.
  • On-site role in our Almaty office (we will relocate you from anywhere).