Lead AI Security Engineer – Agentic Platform Defense

Ernst & Young Oman; Chantilly (VA); On-site; USD 130,000 - 180,000; Full time

Job summary

EY seeks an AI Security Engineer to own the security posture of the Agentic AI platform end to end. The role focuses on defending against agent autonomy, prompt injection, and external tool invocations across cloud-to-air-gapped deployments.

You will define threat models, security controls, secure-by-default contracts, and oversee sandboxing, model provenance, and audit-grade evidence. A broad, deeply technical mandate awaits a seasoned security engineer.

Qualifications

• Must own the platform threat model covering agent autonomy, tool invocation, delegation, and multi-tenant deployment targets.

Responsibilities

• Own the platform threat model, including agent autonomy and data supply chain.
• Define the security engineering and control set for infrastructure, Kubernetes, identity, secrets, and telemetry.
• Set the secure-by-default contract so platform capabilities arrive hardened with correct controls.
• Own defense against agentic threat classes such as prompt injection, jailbreak, and authority escalation.
• Collaborate with the architecture team to define the agent authority model with tight delegation boundaries.
• Own the sandboxing security standard for agent-generated code execution.
• Secure the model and knowledge supply chain, including provenance and integrity.
• Secure agent-to-agent and tool protocols and approvals.
• Lead AI red teaming and adversarial testing.

Skills

Threat modeling

AI security

Cloud-native security

Red teaming

Kubernetes hardening

Job description

EY seeks an AI Security Engineer to own the security posture of the Agentic AI platform end to end. The role focuses on defending against agent autonomy, prompt injection, and external tool invocations across cloud-to-air-gapped deployments.

You will define threat models, security controls, secure-by-default contracts, and oversee sandboxing, model provenance, and audit-grade evidence. A broad, deeply technical mandate awaits a seasoned security engineer.