Lead AI Security Architect & Platform Defender

EY; Madison (WI); Remote; USD 180,000 - 260,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will tackle threat modeling, architecture hardening, and defense against agentic threats across cloud, on-prem, and sandboxed execution.

The role requires deep experience in cloud-native security, AI risk, and translating security into client-ready controls. As a principal security engineer, you will lead red-teaming, policy-as-code, and the defense of agent workflows, data, and supply

Qualifications

• Experience securing cloud-native platforms and AI workloads.
• Ability to write threat models and perform red-team testing.
• Experience presenting to CISOs/regulators and translating security into client-ready controls.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and multi-tenant deployment targets.
• Define the security engineering and control set for infrastructure, Kubernetes, identity, and secure execution.
• Set the secure-by-default contract with templates, Helm charts, sandbox profiles, and network policy.
• Own defense against agentic threat classes including prompt injection, jailbreak, and authority escalation.
• Define the agent authority model with delegation-depth limits and consent boundaries.
• Own the sandboxing security standard for agent-generated code execution and containment.
• Secure the model and knowledge supply chain including provenance and attestation.
• Secure agent-to-agent and tool protocols including discovery trust and authorization.
• Lead AI red teaming and adversarial testing cadence before audits.
• Own supply-chain integrity from artifact signing to SBOM and license governance.
• Own admission and runtime policy across Kyverno and OPA; enforce standards.
• Define Kubernetes and infrastructure hardening baselines and secrets-handling.
• Own tenant isolation assurance and testing to prevent cross-tenant leakage.
• Serve as the security authority in client engagements.

Skills

Cloud-native security

Platform security

AI/Agentic threat models

Threat modeling

Red team

Policy as code

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will tackle threat modeling, architecture hardening, and defense against agentic threats across cloud, on-prem, and sandboxed execution.

The role requires deep experience in cloud-native security, AI risk, and translating security into client-ready controls. As a principal security engineer, you will lead red-teaming, policy-as-code, and the defense of agent workflows, data, and supply