Staff Security Engineer, Enterprise AI
Affirm · Remote US
About the role
Builds and runs Affirm's security review process for enterprise AI and LLM systems within the InfoSec team, working with Legal, Privacy, Compliance, IT and Engineering so the company can adopt AI safely. The engineer reviews the architecture, data flows and permissions of internal AI tools and agentic or MCP-based systems, threat models risks such as prompt injection and tool-permission abuse, reviews code, prompts and agent configurations, and builds guardrails covering authorisation for agents, data handling, logging and policy as code. The role also assesses AI features in SaaS vendors and contributes to AI incident playbooks.
Affirm wants an experienced security engineer who has secured AI systems in practice, with agentic and MCP experience, Python and Terraform skills, and strong threat-modelling fundamentals. Remote in the US.