Staff Product Security Engineer

📋 Description

• Lead and continuously improve Affirm's enterprise AI security review process, evaluating
• Threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure
• Review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP
• Design and build security guardrails and tooling for AI systems including permission boundaries
• Evaluate the AI capabilities of third-party SaaS vendors (e.g., Notion, Slack, Google Workspace) as
• Identify emerging classes of AI/agentic security vulnerabilities, develop mitigations before they

🎯 Requirements

• Hands-on experience designing, evaluating, and maintaining security architecture for AI/LLM-based
• Practical experience threat modeling and reviewing AI/LLM applications (e.g., against the OWASP Top
• Built AI governance artifacts (acceptable use policy, data-handling standards, vendor/model risk
• Experience with enterprise tools for AI visibility and control (e.g., CASB, IDP/Okta) and
• Ability to build security tooling, guardrails, and detections with Python or similar, and deploy
• Understanding of how LLMs and agentic systems are built (RAG, embeddings, fine-tuning, tool use)

🎁 Benefits

• 100% subsidized medical coverage, dental and vision for you and your dependents
• Monthly stipends for health, wellness and tech spending
• Equity rewards
• Flexible time off and generous holiday calendars
• Employee stock purchase plan (ESPP)
• In-person onboarding experience