# Application Security Engineer at Higgsfield

- Company: Higgsfield
- What the company does: Create images, videos, and voice content with Higgsfield AI from text prompts or references. Edit and upscale media, automate creative workflows with its AI agent, and generate content on web and mobile. Backed by Accel and Menlo.
- Company website: https://higgsfield.ai/
- Type: Startups (AI role)
- Level: Mid level
- Location: Almaty, Kazakhstan
- Work setup: On-site
- Posted: 2026-07-18
- Apply by: 2026-10-08
- Apply: https://jobs.ashbyhq.com/higgsfieldai/331f865a-c956-431c-bd46-f6a5f61a4ac6
- Page: https://www.1752.vc/careers/jobs/higgsfield-application-security-engineer/

## About the role

Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first. Pentest new features and products pre-release: web, APIs, admin surfaces.

## What they're looking for

- A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research
- The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it
- A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written
- Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on
- High agency
- Working English

Tags: Engineering & Product