> Markdown version of [/jobs/ext/3949235-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/3949235-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Engineer

- **Company:** Higgsfield Inc.
- **Location:** Mountain View, CA, United States
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Bash Shell, Software as a Service, Cloud Computing, Cyber Security, Python (Programming Language), Password Management, Windows PowerShell, Remote File Sharing, Anti-Phishing, Azure Machine Learning, Security Assertion Markup Language (SAML), Software Engineering, Technical Data Management Systems
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/it-security-engineer-mountain-view-ca--1b28d189-cb7d-4dfc-ad36-38e919ac5210

## About the Role

Computer Security, Fortune 500 Customers, Artificial Intelligence (AI), Editing, Software as a Service (SaaS), Software Engineering, Cloud Computing, Startup, Vehicle Fleets, Manufacturing Data Management, * Hands-on experience running MDM and EDR at fleet scale.

 * Production experience running an IdP: SSO/SAML/SCIM, MFA, and conditional access.
 * Enough scripting to automate the repetitive parts (Python, PowerShell, or Bash).
 * High agency.
 * Working English.

Nice to have:

 * Familiarity with SOC 2.
 * High-growth startup experience.

## Description

Youll own corporate security: the devices, identities, and SaaS the company runs on. Sister role to theInfrastructure Security Engineer - they secure the cloud and ML platform; this role secures the people side.

Key Responsibilities

We are looking for someone with experience in scaling high-growth startups who can make an immediate impact in the following areas:

Endpoints:

 * Own MDM across the fleet: enrollment, policy enforcement, compliance, device lifecycle.
 * Run EDR/XDR: detection, triage, and response on employee devices.
 * Set and maintain endpoint hardening standards with IT and Engineering.

Corporate identity & access

 * Own corporate identity: Entra SSO, MFA, conditional access.
 * Run joiner-mover-leaver: provisioning and same-day offboarding across all SaaS.
 * Administer a Password Management solution and drive credential hygiene.

Awareness & response

 * Security-review new SaaS before adoption; own the approved-app list; hunt shadow IT.
 * Secure the collaboration stack: email, Slack, file sharing. AWARENESS & RESPONSE
 * Run phishing simulations and onboarding security training.
 * Partner with infrastructure security on centralized security monitoring: feed endpoint and identity signals into shared detection and response.