Lead AI Security Engineer — Remote

Affirm; New York (NY); Remote; USD 230,000 - 290,000; Full time

Benefits offered by this job

Health coverage for employees and deps

Monthly tech and wellness stipends

Flexible time off

Employee stock purchase plan

Job summary

Affirm is pursuing a Senior Security Engineer to lead the end-to-end security review process for AI/LLM systems. You will evaluate architecture, data flows, and permissions, designing guardrails and tests to ensure secure, scalable AI adoption across the company.

Partner with Security, Legal, Privacy, Compliance, IT, and Engineering to shape repeatable, auditable controls. You will build threat models for AI/LLM platforms, review code and configurations, and develop policy-as-code, while staying

Qualifications

• Seasoned security engineer for AI/LLM systems
• Threat modeling for AI/LLM apps and agentic systems
• Experience with enterprise security controls and IAM
• Governance artifacts for AI and vendor risk assessments
• Experience with IAM for non-human identities

Responsibilities

• Lead and continuously improve enterprise AI security review process for architectural risks
• Threat model AI/LLM systems and data flows; drive remediation
• Review source code, prompts, configurations, and tool manifests; help build security test cases
• Design and build security guardrails and tooling for AI systems and MCP servers
• Evaluate AI capabilities of third-party SaaS vendors during reviews
• Identify new AI security vulnerabilities and contribute to incident response playbooks
• Lead cross-functional AI security initiatives and communicate with executives

Skills

AI security

Threat modeling

Security architecture

Python

Terraform

Kubernetes

AWS

OAuth2

SAML

Non-human identities

Tools

Notion AI

Slack AI

Google Workspace AI

GitHub

Jira

OpenAI

Anthropic

Job description

Affirm is pursuing a Senior Security Engineer to lead the end-to-end security review process for AI/LLM systems. You will evaluate architecture, data flows, and permissions, designing guardrails and tests to ensure secure, scalable AI adoption across the company.

Partner with Security, Legal, Privacy, Compliance, IT, and Engineering to shape repeatable, auditable controls. You will build threat models for AI/LLM platforms, review code and configurations, and develop policy-as-code, while staying