AI Security Platform Architect

EY; Detroit (MI); Remote; USD 151,000 - 251,000; Full time

Job summary

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end-to-end. This role spans silicon-level attestation to prompt-injection defense, defending a highly regulated enterprise across tax, financial services, audit and risk.

The ideal candidate combines cloud-native security depth with AI threat-modeling, red-teaming, policy-as-code, and client-facing assurance. You’ll define secure-by-default contracts and lead audits with CISOs and regulators.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field.
• 10+ years in security engineering with hands-on production ownership.
• Deep cloud-native and Kubernetes security experience in production.
• Experience securing AI/ML systems, including agentic risk and prompt injection.
• Threat modelling applied to real systems with verifiable controls.
• Client-facing experience with CISOs, auditors or regulators.

Responsibilities

• Own the platform threat model across agent autonomy and tool invocation.
• Define the security engineering and control set for every platform layer.
• Set the secure-by-default contract for agent templates and network policies.
• Lead AI red teaming and adversarial testing for guardrails and boundaries.
• Own supply-chain integrity, SBOM and attestation processes.

Skills

Cloud-native security

AI threat models

Zero-trust

Policy-as-code

Security engineering leadership

Communication

Education

Bachelor’s or Master’s degree in Computer Science, Security, or related field

Tools

SPIFFE/SPIRE

PKI

Sigstore/Cosign

Notation

Kyverno

OPA

Job description

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end-to-end. This role spans silicon-level attestation to prompt-injection defense, defending a highly regulated enterprise across tax, financial services, audit and risk.

The ideal candidate combines cloud-native security depth with AI threat-modeling, red-teaming, policy-as-code, and client-facing assurance. You’ll define secure-by-default contracts and lead audits with CISOs and regulators.