{"id":97089,"url":"https://alion.io/job/higgsfield-application-security-engineer","title":"Application Security Engineer","company":{"id":66037,"name":"Higgsfield","domain":"higgsfield.ai","url":"https://alion.io/company/higgsfield","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":83,"open_postings":14,"ghost_share":0,"stale_share":0.643,"repost_share":0.071,"time_to_fill_p50_days":52,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Almaty, Kazakhstan"],"countries":["KZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":63000,"period":"year","method":null,"sample_n":5423},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-07-18T15:35:06Z","employer_posted_date":"2026-07-18","last_verified_at":"2026-10-24T18:27:07Z","board_verified":true,"closed_at":null,"days_open":98,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":98},"description":"Why work at Higgsfield AI?\nHiggsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.\nWe're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.\nAbout the role\nBreak new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first.\nWhat you'll do:\nPentest new features and products pre-release: web, APIs, admin surfaces.\n\nWork out the attack surface of each new feature yourself.\n\nHunt authorization flaws across our multi-tenant APIs and retest fixes.\n\nJoin design and code reviews early, so flaws die before they're built.\n\nTurn recurring findings into guardrails - paved-road standards and automated checks - so a bug class dies once instead of resurfacing every release.\n\nBring a working repro to the team that owns the code and see the fix through.\n\nRequirements\nA track record of finding real vulnerabilities in real systems - appsec work, bug bounty, or research.\n\nThe ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it.\n\nA threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written.\n\nEnough cloud and container fundamentals to follow a bug into the infrastructure it runs on.\n\nHigh agency.\n\nWorking English.\n\nNice to have\nLLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates.\n\nWhat we offer:\nCompetitive base salary in USD\n\nEquity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth.\n\nOn-site role in our Almaty office (we will relocate you from anywhere).","description_format":"text","description_chars":2185,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Application Security","Generative Image","Generative Video","Generative Audio & Music"],"lifecycle":[{"event":"open","at":"2026-07-18T15:35:06Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.323,"p_room":0.36,"age_days":97,"expected_fill_days":52,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/higgsfield-application-security-engineer","json_url":"https://alion.io/job/higgsfield-application-security-engineer.json","meta":{"generated_at":"2026-10-24T20:31:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29918,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":66037},"rest":"https://alion.io/mcp/rest/get_company?id=66037"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhiggsfield-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhiggsfield-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhiggsfield-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/higgsfield-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhiggsfield-application-security-engineer"}]}