Staff Product Security Engineer

Affirm
Canada, United States
Workplace: RemoteFull timeUSD 204,000 - 290,000 annuallyFunction: CybersecuritySkills: ["Cross-functional leadership","Communication","Threat modeling"]

Build and run Affirm’s enterprise AI/LLM security review process, evaluating architectures, data flows, permissions, and design for internal AI tools and agentic systems. Lead threat modeling for AI risks (e.g., prompt injection, insecure output handling, data poisoning) and drive remediation. Review code, prompts, agent and tool configurations, and develop security guardrails, tooling, detections, and policy-as-code to enforce AI permission boundaries. Partner across Security, Legal, Privacy, Compliance, IT, and Engineering, and support vendor AI risk reviews.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Affirm
Affirm
16 hours ago

Staff Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Build and run Affirm’s enterprise AI/LLM security review process, evaluating architectures, data flows, permissions, and design for internal AI tools and agentic systems. Lead threat modeling for AI risks (e.g., prompt injection, insecure output handling, data poisoning) and drive remediation. Review code, prompts, agent and tool configurations, and develop security guardrails, tooling, detections, and policy-as-code to enforce AI permission boundaries. Partner across Security, Legal, Privacy, Compliance, IT, and Engineering, and support vendor AI risk reviews.
Location: Canada, United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Lead and continuously improve Affirm’s enterprise AI security review process for internal AI tools, agentic/MCP-based systems, and AI features, embedding security requirements into design.
  • •Threat model AI/LLM-based systems and data flows, identifying and driving remediation for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure.
  • •Review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and create security-focused test cases and red-team/eval scenarios for launch readiness.
  • •Design and build security guardrails and tooling for AI permission boundaries, agent authn/authz (including MCP servers), data-handling controls, logging/monitoring, and policy-as-code enforcement.
  • •Evaluate third-party AI/SaaS vendor capabilities for security reviews, identify emerging AI/agent vulnerabilities, contribute to incident response playbooks, and translate research into practical controls.

Pay and Benefits

Salary: USD 204,000 - 290,000 annually
Perks:Health InsuranceDentalVisionRemote WorkEquity

Key Requirements

  • •Seasoned security engineering experience designing, evaluating, and maintaining security architecture for AI/LLM systems.
  • •Hands-on threat modeling and reviewing AI/LLM applications, including agentic and tool-calling frameworks.
  • •Experience building AI governance artifacts such as acceptable use policies, data-handling standards, and vendor/model risk assessments.
  • •Ability to build security tooling, guardrails, and detections using Python and policy-as-code with Infrastructure as Code.
  • •Knowledge of LLM/agent architectures (e.g., RAG, embeddings, fine-tuning, tool use) and authn/authz models (OAuth2, SAML).
Experience:AI securityEnterprise securityLLMAgentic systems
Skills:Cross-functional leadershipCommunicationThreat modeling
Tech Stack:PythonInfrastructure as CodeIaCTerraformKubernetesAWSOAuth2SAMLCASBOktaOpenAIAnthropicGitHubGoogle WorkspaceSlackNotionJiraRAGEmbeddingsFine-tuning

Company Brief

Affirm
Provides point-of-sale lending and buy-now-pay-later (BNPL) solutions for consumers and merchants, enabling installment payments, consumer financing, and embedded financial services through APIs and partnerships with retailers and platforms.
Industry: Lending
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2012
WebsiteLinkedIn