Senior AI Security Engineer — Enterprise & LLM

Affirm; Phoenix (AZ); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage

Tech stipend

Flexible time off

ESPP

Job summary

Affirm seeks a seasoned security engineer to lead end-to-end AI/LLM security reviews, threat modeling, and guardrail design across enterprise tools and vendors. You will partner across Security, Legal, Privacy, Compliance, IT, and Engineering to ensure scalable, secure AI adoption.

You will implement policy-as-code, build detections in Python, and leverage Terraform/Kubernetes in cloud environments to protect sensitive data and systems. Remote-first with flexible in-person options.

Qualifications

• Seasoned security engineer with hands-on experience designing, evaluating, and maintaining security architecture for AI/LLM-based systems.
• Deep expertise in enterprise security controls, processes, and risk management.
• Experience threat modeling and reviewing AI/LLM applications and securing agentic systems.

Responsibilities

• Lead and continuously improve enterprise AI security review processes evaluating architecture and data flows.
• Threat model AI/LLM systems and data flows for risks and remediation.
• Review source code, prompts, configurations, and tool manifests to support security testing.
• Design and build guardrails and policy-as-code to enforce AI security.
• Evaluate third-party SaaS vendors as part of security reviews and drive risk-based decisions.
• Identify emerging AI security vulnerabilities and contribute to incident response playbooks.
• Lead cross-functional AI security initiatives and communicate with technical and executive stakeholders.

Skills

Threat modeling

AI security

Python

IaC (Terraform)

Kubernetes

AWS

OAuth2 / SAML

Non-human identities

Vendor security reviews

Cross-functional leadership

Tools

Terraform

Kubernetes

AWS

OAuth2

SAML

Job description

Affirm seeks a seasoned security engineer to lead end-to-end AI/LLM security reviews, threat modeling, and guardrail design across enterprise tools and vendors. You will partner across Security, Legal, Privacy, Compliance, IT, and Engineering to ensure scalable, secure AI adoption.

You will implement policy-as-code, build detections in Python, and leverage Terraform/Kubernetes in cloud environments to protect sensitive data and systems. Remote-first with flexible in-person options.