Member of Technical Staff – Enterprise Security

Higgsfield AI

. Own endpoint security across corporate devices using Microsoft Intune/MDM, including enrollment, compliance, and device lifecycle management .

Posted 10/23/2026full-timeSan Francisco • California • United StatesLead💰 $200,000 - $300,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in endpoint security management, identity infrastructure, and corporate security practices, with a strong focus on implementing Zero Trust principles and automating security workflows. Proficient in managing security systems and conducting incident investigations while ensuring compliance across corporate devices and applications.

Highest-signal resume keywords

Microsoft Intune/MDMMicrosoft Entra IDEDR/XDR ImplementationScripting and AutomationZero Trust Principles

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Endpoint Security ManagementIdentity Lifecycle ManagementThreat Detection and RemediationSaaS Application SecurityPrivileged Access ManagementSecurity MonitoringIncident InvestigationCompliance ChecksAccess ReviewsSecurity Baselines

Soft Skills

Independent Problem-SolvingTechnical JudgmentCross-Functional CollaborationSecurity Awareness Leadership

Tools & Technologies

SSO/SAMLSCIMMFAConditional AccessCredential Security ControlsCollaboration Tools SecurityEmail SecuritySlack SecurityFile-Sharing Platforms SecurityAPIs

Industry Keywords

Corporate IT SecurityEnterprise SecuritySecurity EngineeringLeast-Privilege AccessShadow ITSecurity StandardsSecurity WorkflowsSecurity Alerts MonitoringPhishing SimulationsSecurity Initiatives

Tech Stack

Tools & technologies

Python

About the role

Key responsibilities & impact

Own endpoint security across corporate devices using Microsoft Intune/MDM, including enrollment, compliance, and device lifecycle management
Implement and operate EDR/XDR capabilities, including threat detection, investigation, and remediation
Establish endpoint hardening standards and security baselines with IT and Engineering
Own corporate identity infrastructure across Microsoft Entra ID, including SSO/SAML, SCIM, MFA, Conditional Access, and RBAC
Manage joiner, mover, and leaver workflows across SaaS applications
Administer password management, privileged access, and credential security controls
Conduct access reviews and implement least-privilege and Zero Trust principles
Evaluate SaaS applications, maintain approved application standards, and identify shadow IT
Secure corporate collaboration tools, including email, Slack, and file-sharing platforms
Review application configurations, permissions, and authentication controls
Lead security awareness initiatives, phishing simulations, and employee training
Monitor and investigate security alerts across identity, endpoints, and corporate applications
Build detections for compromised accounts, suspicious activity, and endpoint threats
Automate provisioning, access reviews, compliance checks, and security workflows using scripts and APIs
Integrate endpoint and identity signals into centralized monitoring with Infrastructure Security
Lead incident investigation, containment, and remediation
Identify and prioritize enterprise security risks based on business impact
Lead security initiatives from technical design through implementation and ongoing operations
Establish scalable security standards and practical engineering controls
Partner cross-functionally to strengthen security without slowing business operations

Requirements

What you’ll need

4+ years of hands-on experience in enterprise security, corporate IT security, or security engineering
Proven experience personally implementing, configuring, and operating corporate security systems
Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management
Hands-on experience with Microsoft Intune/MDM, endpoint compliance, and EDR/XDR
Experience securing SaaS applications, corporate collaboration tools, and privileged access
Proficiency in scripting and automation using Python, PowerShell, Bash, or similar languages
Experience with security monitoring, incident investigation, and remediation
Strong understanding of Zero Trust, least-privilege access, and corporate security practices
Sound technical judgment, independent problem-solving skills, and broad expertise across corporate security domains
Based in the San Francisco Bay Area or willing to relocate
Able to work in the San Francisco office at least 3 days per week

Benefits

Comp & perks

Discretionary annual bonus program
Company stock option program
Medical, dental, and vision insurance
401(k) retirement plan with company matching
Additional benefits and perks
Opportunity to work on ambitious AI products with an experienced, international team
Significant ownership, direct impact, and professional growth opportunities
Hybrid work arrangement with remote work on remaining days