Senior AI Security Engineer - Enterprise & LLMs (Remote)

Affirm; Austin (TX); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Tech stipends for setup

Flexible time off

Employee stock purchase plan

Job summary

Affirm is a remote-first company seeking a seasoned security engineer to lead end-to-end AI/LLM security reviews and establish guardrails that enable safe deployment of AI features across enterprise tools.

You will threat model data flows, review prompts and tool configurations, and drive security test cases with cross-functional partners in Security, Legal, Privacy, Compliance, IT, and Engineering. The role emphasizes policy-as-code and scalable security controls.

Qualifications

• Seasoned security engineer with hands-on experience designing, evaluating, and maintaining security architecture for AI/LLM-based systems.
• Practical experience threat modeling and reviewing AI/LLM apps and securing agentic systems and tool-calling frameworks.
• Experience building AI governance artifacts and evaluating AI capabilities within SaaS platforms in vendor reviews.
• Familiarity with enterprise tools for AI visibility and control (CASB, IDP/Okta).
• Ability to build security tooling and policy-as-code using Python and IaC (Terraform); familiarity with Kubernetes and AWS.

Responsibilities

• Lead and continuously improve Affirm's enterprise AI security review process for architecture, data flows, permissions, and design of AI features.
• Threat model AI/LLM systems and data flows for risks and drive remediation.
• Review source code, prompts, configurations, and tool manifests; help owners build security-focused test cases and eval scenarios.
• Design and build security guardrails and tooling for AI systems permissions, authn/authz, data-handling and logging.
• Evaluate AI capabilities of third-party SaaS vendors as part of vendor security reviews and drive risk-based adoption decisions.
• Identify AI/agentic vulnerabilities, develop mitigations, and contribute to AI incident response playbooks.
• Lead cross-functional AI security initiatives and communicate with technical and executive stakeholders; leverage standards like OWASP LLM Top 10 and MITRE ATLAS.

Skills

Security engineering

Threat modeling

Python

Terraform

Kubernetes

AWS

OAuth2

SAML

Tools

Notion AI

Slack AI

Google Workspace AI

GitHub Copilot

CASB

Okta

Jira

Job description

Affirm is a remote-first company seeking a seasoned security engineer to lead end-to-end AI/LLM security reviews and establish guardrails that enable safe deployment of AI features across enterprise tools.

You will threat model data flows, review prompts and tool configurations, and drive security test cases with cross-functional partners in Security, Legal, Privacy, Compliance, IT, and Engineering. The role emphasizes policy-as-code and scalable security controls.