FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Member of Technical Staff – Product Security
Higgsfield AI. Conduct hands-on penetration testing of new products and features, including web applications, APIs, and administrative interfaces .
Posted 10/23/2026full-timeSan Francisco • California • United StatesLead💰 $200,000 - $300,000 per yearWebsite
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in product security and application security, with a strong focus on penetration testing, vulnerability research, and threat modeling. Proficient in translating security findings into scalable engineering controls and integrating security practices into development workflows.
Highest-signal resume keywords
Penetration TestingApplication SecurityThreat ModelingVulnerability ResearchPython Programming
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Web Application SecurityAPI SecurityMulti-Tenant IsolationCode AnalysisSecurity Standards DevelopmentAutomated Security ChecksCloud SecurityContainer SecurityRoot Cause AnalysisSecure Design Reviews
Soft Skills
Independent Problem-SolvingStrong Technical JudgmentProactive Risk IdentificationCollaboration with Engineers
Tools & Technologies
CI/CD WorkflowsSecurity ToolingGenerative AI ProductsRole-Based Access ControlsSSO
Industry Keywords
Security FlawsAuthorizationAuthenticationVulnerability ExploitationSecurity Practices
Tech Stack
Tools & technologiesCloudJavaScriptPythonTypeScriptGo
About the role
Key responsibilities & impact- Conduct hands-on penetration testing of new products and features, including web applications, APIs, and administrative interfaces
- Identify security risks across agentic systems, MCP servers, code-generating agents, and AI-powered applications
- Map attack surfaces and uncover authorization, authentication, and multi-tenant isolation vulnerabilities
- Develop proof-of-concept exploits, validate findings, and retest remediation efforts
- Partner with Engineering early in product development to identify and prevent security flaws before release
- Conduct threat modeling, architecture reviews, and security-focused code reviews
- Analyze complex codebases to trace vulnerabilities to their root cause and recommend effective fixes
- Assess security risks across generative AI products, user-deployed applications, SSO, and role-based access controls
- Translate recurring vulnerabilities into secure development standards, reusable controls, and automated security checks
- Build security tooling and integrate preventive controls into development and CI/CD workflows
- Identify systemic weaknesses and implement solutions that prevent entire classes of vulnerabilities
- Apply cloud, container, and infrastructure security knowledge across the application stack
- Own security findings from discovery through remediation, working directly with engineers on lasting fixes
- Prioritize vulnerabilities based on exploitability, business impact, and real-world risk
- Establish practical security standards for rapid product development
- Help define security practices for emerging AI technologies and new product architectures
Requirements
What you’ll need- 5+ years of hands-on experience in product security, application security, penetration testing, or vulnerability research
- Proven track record of independently discovering and exploiting real vulnerabilities through application security work, bug bounty programs, or security research
- Deep understanding of web application and API security, including authentication, authorization, and multi-tenant isolation
- Strong ability to read and analyze modern codebases, identify root causes, and collaborate with engineers on remediation
- Experience conducting threat modeling, secure design reviews, and hands-on penetration testing
- Proficiency in Python, JavaScript, TypeScript, or Go
- Familiarity with cloud infrastructure, containers, and modern application architectures
- Ability to translate security findings into scalable engineering controls and automated checks
- Strong technical judgment, independent problem-solving skills, and a proactive approach to identifying security risks
- Must be based in the San Francisco Bay Area or willing to relocate
- Able to work in the San Francisco office at least 3 days per week
- Expected to be available during agreed working hours and maintain sufficient overlap with the relevant team’s time zone
Benefits
Comp & perks- Bonus eligible; may participate in the Company's discretionary annual bonus program
- Eligible to participate in the company’s stock option program
- Medical, dental, and vision insurance
- Competitive 401(k) retirement plan with company matching
- Additional benefits and perks
- Opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team
- Significant ownership, direct impact, and opportunities for professional growth
- Hybrid work arrangement with remote work on remaining days