AI Security Platform Director

EY; Frankfort (KY); Remote; USD 140,000 - 250,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. This role spans from silicon-level attestation to policy enforcement, with emphasis on Kubernetes hardening, supply-chain integrity, sandboxed execution, and audit-grade evidence.

The ideal candidate will have deep cloud-native security expertise, experience with AI threat models, and the ability to defend complex, regulated deployments for clients in financial services, tax, and risk

Qualifications

• Bachelor's or Master's degree in Computer Science, Security, or a related field, or demonstrably equivalent depth.
• 10+ years in security engineering or offensive security with hands-on ownership.
• Deep cloud-native and Kubernetes security experience in production.
• Practical experience securing AI or ML systems in production, including prompt injection awareness.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and data supply chains.
• Define security engineering and control sets for all platform layers including Kubernetes and network policy.
• Lead defense against agentic threat classes and run red-teaming exercises.
• Own supply-chain integrity, SBOM, and provenance governance.
• Define and enforce policy-as-code across Kyverno and OPA; ensure compliant workloads.

Skills

Cloud security

AI security

Threat modeling

Policy-as-code

Zero trust

Education

Bachelor's or higher in CS/Security

Tools

Kubernetes

Sigstore/Cosign

OPA/Kyverno

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. This role spans from silicon-level attestation to policy enforcement, with emphasis on Kubernetes hardening, supply-chain integrity, sandboxed execution, and audit-grade evidence.

The ideal candidate will have deep cloud-native security expertise, experience with AI threat models, and the ability to defend complex, regulated deployments for clients in financial services, tax, and risk