Application Security Engineer
Why work at Higgsfield AI?
Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.
We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.
About the role
Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first.
What you'll do:
Pentest new features and products pre-release: web, APIs, admin surfaces.
Work out the attack surface of each new feature yourself.
Hunt authorization flaws across our multi-tenant APIs and retest fixes.
Join design and code reviews early, so flaws die bef