Lead AI Security Engineer: Platform Threat Defense

Ernst & Young Oman; Houston (TX); Remote; USD 151,000 - 251,000; Full time

Benefits offered by this job

Medical & Dental

401(k) Plan

Pension

Paid time off

Flexible vacation policy

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role spans threat modelling, cloud-native security, and policy-as-code across the entire stack, from silicon-level attestation to sandboxed execution.

Ideal candidates have deep cloud-native security experience, hands-on AI threat modelling, and the ability to defend complex client deployments in regulated environments.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field.
• 10+ years in security engineering, including hands-on production ownership.
• Demonstrable depth in cloud-native and Kubernetes security.
• Experience with workload identity and secrets management (SPIFFE/SPIRE, Vault or equivalents).
• Practical experience securing AI or ML systems in production, incl. prompt injection risks.
• Threat modelling applied to real systems with verifiable controls.

Responsibilities

• Own the platform threat model covering agent autonomy, tooling, and multi-tenancy.
• Define security engineering and control set for all platform layers (infrastructure, Kubernetes, identity, sandboxing).
• Set secure-by-default contracts including agent templates, Helm charts, and network policies.
• Lead defense against agentic threat classes and adversarial testing.
• Define and agree on the agent authority model with architecture teams.
• Own sandboxing standards for agent-generated code execution and isolation.
• Secure the model and knowledge supply chain (SBOM, provenance, notations).
• Define policy as code across Kyverno and OPA; enforce when workloads run.

Skills

Cloud security

AI security

Threat modeling

Policy-as-code

Red teaming

Regulatory engagement

Education

Bachelor’s or Master’s in CS or Security

Tools

Kubernetes

Sigstore/Cosign

Notations

OSS tooling (SBOM)

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role spans threat modelling, cloud-native security, and policy-as-code across the entire stack, from silicon-level attestation to sandboxed execution.

Ideal candidates have deep cloud-native security experience, hands-on AI threat modelling, and the ability to defend complex client deployments in regulated environments.