Staff AI Security Engineer — Enterprise & LLM Risk

Affirm; Dallas (TX); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Remote-first

100% health coverage for you and your?

Tech stipends

Generous time off

Employee stock purchase plan

Job summary

Affim is a remote-first company securing enterprise AI. This role leads the end-to-end AI security review process, evaluating architecture, data flows, and permissions for internal AI tools and MCP-based systems, and embeds security into the design phase.

You will threat model AI/LLM systems, review code and prompts, and drive risk-based vendor security reviews with Security, Legal, Privacy, Compliance, IT, and Engineering.

Qualifications

• Seasoned security engineer with hands-on AI/LLM security design experience.
• Practical threat modeling for AI/LLM apps and securing agentic systems.
• Experience with AI governance artifacts and vendor risk assessments.
• Familiar with enterprise security tools and IAM for non-human identities.
• Ability to build tooling and detections with Python and Terraform; Kubernetes/AWS familiarity.
• Strong communication with technical and executive stakeholders; regulatory experience a plus.

Responsibilities

• Lead and improve the enterprise AI security review process.
• Threat model AI/LLM systems and data flows.
• Review source code, prompts, agent configs, and tool manifests.
• Design and build security guardrails and policy-as-code.
• Evaluate third-party AI SaaS vendors for security.
• Identify AI/agentic vulnerabilities and develop mitigations.
• Lead cross-functional AI security initiatives across teams.

Skills

AI security

Threat modeling

Python

AWS

Kubernetes

OAuth2 / SAML

IAM for non-human identities

Security architecture

Tools

Terraform

Okta / IDP

CASB

Job description

Affim is a remote-first company securing enterprise AI. This role leads the end-to-end AI security review process, evaluating architecture, data flows, and permissions for internal AI tools and MCP-based systems, and embeds security into the design phase.

You will threat model AI/LLM systems, review code and prompts, and drive risk-based vendor security reviews with Security, Legal, Privacy, Compliance, IT, and Engineering.