Remote AI Security Engineer - Enterprise Guardrails

Affirm; Detroit (MI); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage at no cost

Monthly stipends for tech setup

Flexible time off

ESPP

Job summary

Affirm is a remote-first company focusing on secure, transparent pay over time. The InfoSec team protects systems and data from evolving threats and enforces protective controls across the organization.

In this role, you’ll build and run Affirm’s end‑to‑end security review process for enterprise AI/LLM systems, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to scale the program.

Qualifications

• Seasoned security engineer with hands-on experience designing, evaluating, and maintaining security architecture for AI/LLM-based systems.
• Experience threat modeling AI/LLM applications and securing agentic systems and tool-calling frameworks.
• Built AI governance artifacts and evaluated AI capabilities within SaaS platforms as part of vendor reviews.

Responsibilities

• Lead and continuously improve Affirm's enterprise AI security review process evaluating architecture, data flows, permissions, and design of internal AI tools and MCP-based systems.
• Threat model AI/LLM-based systems and data flows for risks; drive remediation.
• Review source code, system prompts, agent configurations, and tool manifests to help owners build security-focused tests.
• Design and build security guardrails and tooling for AI systems, authentication/authorization, data handling, logging, and policy-as-code.
• Evaluate AI capabilities of third-party SaaS vendors as part of vendor security reviews.
• Identify emerging AI/agentic vulnerabilities and contribute to incident response playbooks.
• Lead cross-functional AI security initiatives and translate research into practical controls.

Skills

Security engineering

Threat modeling

AI/LLM security

Cross-functional leadership

Security architecture

Tools

Python

Terraform

Kubernetes

AWS

CI/CD

Job description

Affirm is a remote-first company focusing on secure, transparent pay over time. The InfoSec team protects systems and data from evolving threats and enforces protective controls across the organization.

In this role, you’ll build and run Affirm’s end‑to‑end security review process for enterprise AI/LLM systems, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to scale the program.