AI Security Architect for Agentic Platform

Ernst & Young Oman; Pittsburgh (Allegheny County); On-site; USD 126,000 - 251,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Flexible vacation policy

Job summary

EY seeks an AI Security Engineer to own the security posture of its Agentic AI platform end to end. You will define threat models, security controls, and policy-as-code across cloud-native infrastructure, Kubernetes, and supply chains.

Lead red-teaming and client engagements, ensuring audit-grade assurance in highly regulated environments. The role demands deep security engineering expertise with AI/agentic threat knowledge, and the ability to articulate risk to CISOs and regulators.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field (or demonstrably equivalent depth).
• 10+ years in security engineering, including hands-on production ownership.
• Deep cloud-native and Kubernetes security experience in production environments.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and data supply chain.
• Define security engineering and control sets for infrastructure, Kubernetes, identity, and data.
• Lead security reviews with clients, regulators, and auditors, delivering assurance artefacts.

Skills

Cloud-native security

AI threat models

Zero-trust

Policy-as-code

Software supply-chain security

Offensive-security

Education

Bachelor’s or Master’s in CS/Security

10+ years security engineering

Job description

EY seeks an AI Security Engineer to own the security posture of its Agentic AI platform end to end. You will define threat models, security controls, and policy-as-code across cloud-native infrastructure, Kubernetes, and supply chains.

Lead red-teaming and client engagements, ensuring audit-grade assurance in highly regulated environments. The role demands deep security engineering expertise with AI/agentic threat knowledge, and the ability to articulate risk to CISOs and regulators.