Higgsfield AI

Application Security Engineer

Almaty, Kazakhstan

hirly Pro

Get in front of the people hiring at Higgsfield AI

Reach the hiring manager at Higgsfield AI on LinkedIn, from your own account
hirly applies to this job for you, with unlimited applications
A resume and cover letter written for this job, unlimited
The hiring manager and recruiter at Higgsfield AI, with contact details

Get Pro for this job →

$49 a month · ₹1,999 for 30 days in India · cancel any time

Get past the screening software and onto a recruiter's desk

hirly rewrites your resume for this job — matching the keywords and skills in the posting, moving your most relevant experience to the top, and writing a cover letter to fit. About 30 seconds.

Keywords matched to this posting
Fit score before you apply
Cover letter included

Matched against 2.8M live jobs from 210,000+ employers in 200+ countries.

Tailor my resume for this job →

Apply from your AI assistant

Connect hirly to Claude or ChatGPT and ask it to apply to this job. hirly tailors your resume, fills the employer’s form and asks before sending.

See how it works

Some employer sites stop an application at a CAPTCHA or sign-in and hand it back with a link. Applying needs a paid plan. Works with any assistant that supports MCP.

hirly's read of this role

Role family: Engineering
Seniority: Mid level
Country: KZ
Work mode: On-site / unstated
First seen by hirly: 1 Sept 2026

Derived automatically from the posting. Upload your resume above to see how the role scores against it.

the posting

Why work at Higgsfield AI?

We're the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, and powering 390 of Fortune 500 brands. We’re building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn’t just moving fast, but rewriting what fast looks like.

About the role

Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first.

What you'll do:

Pentest new features and products pre-release: web, APIs, admin surfaces.

Work out the attack surface of each new feature yourself.

Hunt authorization flaws across our multi-tenant APIs and retest fixes.

Join design and code reviews early, so flaws die before they're built.

Turn recurring findings into guardrails — paved-road standards and automated checks — so a bug class dies once instead of resurfacing every release.

Bring a working repro to the team that owns the code and see the fix through.

Requirements

A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research.

The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it.

A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written.

Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on.

High agency.

Working English.

Nice to have

LLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates.

What we offer:

Competitive base salary in USD

Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth.

On-site role in our Almaty office (we will relocate you from anywhere).

Original posting on Higgsfield AI's site ↗

Listed on hirly, a job board. hirly is not the employer: Higgsfield AI is hiring for this role.

Browse similar roles

Want this one?

Upload your resume and hirly rewrites it for this job and writes the cover letter — in about thirty seconds, before you sign up.

Tailor my resume for this job