security engineer for corporate IT

Higgsfield AI is a generative AI company developing AI-powered video creation and next-generation creative tools. Its products serve more than 25 million users worldwide and power 390 Fortune 500 brands.

• Own MDM across the device fleet, including enrollment, policy enforcement, compliance, and device lifecycle;
• Run EDR/XDR detection, triage, and response on employee devices;
• Set and maintain endpoint hardening standards with IT and Engineering;
• Own corporate identity through Entra SSO, MFA, and conditional access;
• Run joiner-mover-leaver processes, including provisioning and same-day offboarding across all SaaS;
• Administer a Password Management solution and drive credential hygiene;
• Security-review new SaaS before adoption, own the approved-app list, and hunt shadow IT;
• Secure the collaboration stack, including email, Slack, and file sharing;
• Run phishing simulations and onboarding security training;
• Partner with infrastructure security on centralized security monitoring by feeding endpoint and identity signals into shared detection and response.

• Hands-on experience running MDM and EDR at fleet scale;
• Production experience running an IdP with SSO/SAML/SCIM, MFA, and conditional access;
• Scripting skills sufficient to automate repetitive tasks with Python, PowerShell, or Bash;
• High agency;
• Working English;
• Nice to have: Familiarity with SOC 2, high-growth startup experience.

• Competitive base salary in USD;
• Equity participation in the company’s stock option program;
• On-site role in the Almaty office with relocation from anywhere.