AI Security Platform Architect

EY; Buffalo (NY); Remote; USD 126,000 - 230,000; Full time

Benefits offered by this job

Medical & dental coverage

401(k) plan

Flexible vacation policy

Job summary

EY seeks an AI Security Engineer to own the security posture of its agentic AI platform end to end. You will define threat models, security controls, and policy-based guardrails across cloud-native deployments, including Kubernetes, supply-chain, and isolation.

You will lead red team exercises and produce assurance artefacts for clients and regulators. You will engage with architecture and delivery teams to harden the platform, manage risk, and enable trusted, compliant AI deployments in

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field, or demonstrably equivalent depth.
• 10+ years in security engineering or offensive security with production ownership.
• Demonstrable depth in cloud-native and Kubernetes security in production environments.
• Hands-on experience with workload identity, secrets management, PKI and certificate lifecycle.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and multi-tenancy for cloud-to-air-gapped deployments.
• Define security engineering and control sets for infrastructure, Kubernetes, identity, secrets, and secure execution.
• Lead security by default contracts, including templates, sandbox profiles, and network policies.
• Defend against agentic threat classes including prompt injection, jailbreak, excessive agency, and data exfiltration.
• Define agent authority models, scope/delegation limits, and non-escalation invariants.
• Own sandboxing standards for code execution and ensure containment boundaries.
• Secure the model and knowledge supply chain with provenance, SBOM, and attestation.
• Implement policy-as-code across Kyverno and OPA; enforce signature verification and stand up guardrails.
• Lead AI red teaming and adversarial testing; drive cadence for guardrails and authorities.
• Own end-to-end supply-chain integrity, signing, SBOM, vulnerabilities, and licenses.
• Manage admission control, network policy, and workload isolation across platforms.
• Provide client-facing security reviews and artefacts to CISOs and regulators.
• Drive detection and response for agentic misbehavior with telemetry and playbooks.

Skills

Cloud-native security

AI threat models

Zero-trust & workload identity

Policy-as-code

Software supply-chain security

Offensive security mindset

Executive communication

Risk-based decision making

Education

Bachelor’s or Master’s degree in Computer Science, Security, or related field

Tools

SPIFFE/SPIRE

PKI and certificate lifecycle

Job description

EY seeks an AI Security Engineer to own the security posture of its agentic AI platform end to end. You will define threat models, security controls, and policy-based guardrails across cloud-native deployments, including Kubernetes, supply-chain, and isolation.

You will lead red team exercises and produce assurance artefacts for clients and regulators. You will engage with architecture and delivery teams to harden the platform, manage risk, and enable trusted, compliant AI deployments in