Lead AI Security Architect | Defender of Agentic Platforms

Ernst & Young Oman; Palo Alto (CA); Remote; USD 150,000 - 190,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end. The role focuses on threat modeling, secure-by-default practices, and defense against advanced agentic threats in a cloud-native environment.

The candidate will shape security across the stack—from silicon attestation and Kubernetes hardening to supply-chain integrity and prompt-injection defenses. This is ideal for a principal security engineer with deep cloud-native security and AI threat

Responsibilities

• Own the platform threat model covering agent autonomy, tool invocation, delegated authority, model & data supply chain, multi-tenancy, and deployments from cloud to air-gapped.
• Define the security engineering and control set for every platform layer: infrastructure and boot chain, Kubernetes and cluster fabric, identity & secrets, secure execution & sandboxing, gateway & egress, data & state, delivery pipeline, telemetry.
• Set the secure-by-default contract so platform capabilities arrive hardened, including agent templates, Helm charts, sandbox profiles, and network policy with correct controls.
• Own defense against agentic threat classes including direct and indirect prompt injection, jailbreak and instruction hijacking, excessive agency, confused-deputy and authority-escalation attacks, tool and function-call abuse, memory and context poisoning, retrieval-augmented data exfiltration.
• Work with the architecture team to help define the agent authority model: delegated and on-behalf-of authority, scope and delegation-depth limits, consent boundaries, and the non-escalation invariant that an agent never exceeds the authority of its initiating principal at any hop.
• Own the sandboxing security standard for agent-generated code execution: isolation boundaries, filesystem and credential scope, egress restriction, resource containment, and the escape-test suite that proves the boundary holds.
• Secure the model and knowledge supply chain: model provenance and integrity, upstream registry governance, poisoning and backdoor risk, embedding and vector-store integrity.
• Secure agent-to-agent and tool protocols including MCP and A2A surfaces: discovery trust, tool registration and approval, schema validation, and authorization of inter-agent calls.
• Lead AI red teaming and adversarial testing: build the offensive capability and the

Job description

EY is seeking an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end. The role focuses on threat modeling, secure-by-default practices, and defense against advanced agentic threats in a cloud-native environment.

The candidate will shape security across the stack—from silicon attestation and Kubernetes hardening to supply-chain integrity and prompt-injection defenses. This is ideal for a principal security engineer with deep cloud-native security and AI threat