Lead AI Security Engineer: Defender of Autonomous AI

EY; Tampa (FL); À distance; USD 150 000 - 230 000; Plein temps

Avantages offerts par ce poste

Medical and dental coverage

Pension and 401(k)

Paid time off

Flexible vacation policy

Résumé du poste

EY is seeking an AI Security Engineer to own the security posture of its agentic AI platform end to end. You’ll secure cloud-native infrastructure, governance, and threat models against novel AI-driven risk across regulated environments.

The role demands deep security expertise, including Kubernetes hardening, supply-chain integrity, and policy-driven controls, with client-facing assurance and regulatory readiness in mind.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field.
• 10+ years in security engineering or offensive security with hands-on ownership.
• Experience securing AI/ML systems in production, incl. agentic risk.
• Knowledge of cloud-native security and Kubernetes security at scale.

Responsabilités

• Own the platform threat model covering agent autonomy and data supply chain.
• Define security controls for all platform layers including Kubernetes and identity.
• Set secure-by-default contract with templates, sandboxing, and policies.
• Lead defense against agentic threat classes and prompt injection.
• Define agent authority model and sandboxing standards for code execution.
• Secure the model and knowledge supply chain with provenance and SBOM.

Connaissances

Cloud-native security

AI security

Threat modelling

Policy-as-code

Zero-trust

Workload identity

Formation

Bachelor’s or Master’s in Computer Science or Security

Outils

SPIFFE/SPIRE

Cosign/Sigstore

Description du poste

EY is seeking an AI Security Engineer to own the security posture of its agentic AI platform end to end. You’ll secure cloud-native infrastructure, governance, and threat models against novel AI-driven risk across regulated environments.

The role demands deep security expertise, including Kubernetes hardening, supply-chain integrity, and policy-driven controls, with client-facing assurance and regulatory readiness in mind.