Member of Technical Staff, Enterprise Security

Higgsfield•San Francisco, CA

21h•$200,000 - $300,000•Hybrid

About The Position

Higgsfield AI is hiring a hands-on Member of Technical Staff, Enterprise Security to own security across corporate systems, employee devices, identities, and SaaS applications. As the company scales globally, this role will secure workforce systems spanning endpoint management, identity governance, threat detection, and response. Working closely with IT, Infrastructure Security, and Engineering, the role implements technical controls, automates security operations, and strengthens access governance. It requires personally building, configuring, and operating security systems, applying broad corporate security expertise and sound technical judgment to prioritize meaningful risks in a fast-moving environment. The position is hybrid in the San Francisco Bay Area. Team members work from the San Francisco office three full days per week and remotely on the remaining days. Employees are expected to be available during agreed working hours and maintain sufficient overlap with the relevant team’s time zone. The anticipated base salary range is $200,000–$300,000, depending on experience, skills, scope, and location. The role is eligible for a discretionary annual bonus and participation in the company’s stock option program. The company also offers medical, dental, and vision insurance, a 401(k) plan with company matching, and additional benefits and perks. The position offers significant ownership, direct impact, and professional growth opportunities as the company scales.

Requirements

At least 4 years of hands-on experience in enterprise security, corporate IT security, or security engineering.
Proven experience personally implementing, configuring, and operating corporate security systems.
Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management.
Hands-on experience with Microsoft Intune/MDM, endpoint compliance, and EDR/XDR.
Experience securing SaaS applications, corporate collaboration tools, and privileged access.
Proficiency in scripting and automation using Python, PowerShell, Bash, or similar languages.
Experience with security monitoring, incident investigation, and remediation.
Strong understanding of Zero Trust, least-privilege access, and corporate security practices.
Sound technical judgment, independent problem-solving skills, and broad expertise across corporate security domains.

Nice To Haves

Experience in a high-growth technology environment.

Responsibilities

Own endpoint security across corporate devices using Microsoft Intune/MDM, including enrollment, compliance, and device lifecycle management.
Implement and operate EDR/XDR capabilities, including threat detection, investigation, and remediation.
Establish endpoint hardening standards and security baselines with IT and Engineering.
Own corporate identity infrastructure across Microsoft Entra ID, including SSO/SAML, SCIM, MFA, Conditional Access, and RBAC.
Manage joiner, mover, and leaver workflows, ensuring secure provisioning and timely offboarding across SaaS applications.
Administer password management, privileged access, and credential security controls.
Conduct access reviews and implement least-privilege and Zero Trust principles.
Evaluate new SaaS applications, maintain approved application standards, and identify shadow IT.
Secure corporate collaboration tools, including email, Slack, and file-sharing platforms.
Review application configurations, permissions, and authentication controls.
Lead security awareness initiatives, including phishing simulations and employee training.
Monitor and investigate security alerts across identity, endpoints, and corporate applications.
Build detection capabilities for compromised accounts, suspicious activity, and endpoint threats.
Automate provisioning, access reviews, compliance checks, and security workflows using scripts and APIs.
Partner with Infrastructure Security to integrate endpoint and identity signals into centralized monitoring.
Lead incident investigation, containment, and remediation.
Identify and prioritize enterprise security risks based on business impact.
Lead security initiatives from technical design through implementation and ongoing operations.
Establish scalable security standards and practical engineering controls.
Partner cross-functionally to strengthen security without slowing business operations.