Remote AI Security Engineer - Enterprise & Governance

Affirm; Boulder (CO); Remote; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Monthly tech stipends

Flexible time-off and holidays

Employee stock purchase plan (ESPP)

Job summary

Affirm seeks an experienced security engineer to lead the end‑to‑end security review process for AI/LLM systems. You will evaluate architecture, data flows, permissions, and design controls across internal AI tools, agents, and MCP configurations, embedding security into design.

You will threat model AI/LLM systems, drive remediation, and build security guardrails, policy-as-code, and test cases before launch while collaborating with Security, Legal, Privacy, Compliance, IT and Engineering.

Qualifications

• Seasoned security engineer with hands-on experience designing, evaluating, and maintaining security architecture for AI/LLM-based systems.
• Practical experience threat modeling and reviewing AI/LLM applications and securing agentic systems and tool-calling frameworks.
• Experience building governance artifacts and evaluating AI capabilities within SaaS platforms as part of vendor reviews.

Responsibilities

• Lead and continuously improve enterprise AI security review processes across architecture, data flows, and tool configurations.
• Threat model AI/LLM-based systems to identify prompt injection, data exposure, and tool-permission abuses; drive remediation.
• Review source code, prompts, and tool manifests; help owners build security-focused test cases and eval scenarios prior to launch.
• Design and implement security guardrails and policy-as-code (Python, IaC) for AI systems and MCP servers/clients.
• Evaluate third-party AI/SaaS vendors for security posture and risk, guiding adoption decisions.

Skills

AI security architecture

Threat modeling

Security testing

Python

Infrastructure as Code

Kubernetes

AWS

OAuth2/SAML/IAM (non-human)

Cross-functional leadership

Vendor security reviews

Tools

Terraform

Okta

CASB

GitHub

Job description

Affirm seeks an experienced security engineer to lead the end‑to‑end security review process for AI/LLM systems. You will evaluate architecture, data flows, permissions, and design controls across internal AI tools, agents, and MCP configurations, embedding security into design.

You will threat model AI/LLM systems, drive remediation, and build security guardrails, policy-as-code, and test cases before launch while collaborating with Security, Legal, Privacy, Compliance, IT and Engineering.