Staff AI Security Engineer — Enterprise LLMs & Guardrails

Affirm; San Jose (CA); On-site; USD 230,000 - 290,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Monthly tech stipends

Flexible time off

Employee stock purchase plan

Job summary

Affim is seeking a senior security engineer to lead enterprise AI security reviews for AI/LLM systems and integrations. You will evaluate architecture, data flows, and tool usage, and embed security requirements in the design phase.

You will partner with Security, Legal, Privacy, Compliance, IT, and Engineering to implement guardrails, threat modeling, and policy-as-code, staying current on OWASP LLM Top 10 and MITRE ATLAS.

Qualifications

• Seasoned security engineer with hands-on AI/LLM security experience.
• Experience threat modeling AI/LLM apps and securing agentic systems.
• Ability to design governance artifacts and vendor risk assessments.

Responsibilities

• Lead AI security reviews for architecture, data flows, and tool use.
• Threat model AI/LLM systems and drive remediation efforts.
• Review prompts, configurations, and tool permissions for security gaps.
• Build guardrails and policy-as-code for AI security in IaC workflows.
• Evaluate third-party SaaS AI capabilities during vendor reviews.
• Develop mitigations and contribute to incident response playbooks.
• Coordinate across Security, Legal, Privacy, Compliance, IT, and Engineering.

Skills

AI security

Threat modeling

Security architecture

Python

Infrastructure as Code

Kubernetes

AWS

Education

Bachelor's degree in CS/Engineering

Tools

Terraform

GitHub Copilot

Okta / IDP

Job description

Affim is seeking a senior security engineer to lead enterprise AI security reviews for AI/LLM systems and integrations. You will evaluate architecture, data flows, and tool usage, and embed security requirements in the design phase.

You will partner with Security, Legal, Privacy, Compliance, IT, and Engineering to implement guardrails, threat modeling, and policy-as-code, staying current on OWASP LLM Top 10 and MITRE ATLAS.