Principal AI Security Architect for Agentic Platform

EY; Nashville (TN); Remote; USD 125,000 - 230,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension/401(k)

Paid time off

Flexible vacation policy

Job summary

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers cloud-native and platform security, including Kubernetes hardening, supply-chain integrity, and prompt-injection defenses.

Ideal candidates will drive threat modelling, red teaming, and policy-as-code with client-facing assurance in regulated environments. EY offers strong compensation and a broad benefits package.

Qualifications

• Deep cloud-native security expertise in production scale environments.
• Hands-on with AI/agentic threat models and secure-by-default designs.
• Experience writing threat models and defense-in-depth guardrails.
• Familiarity with policy-as-code and enforcement tooling.
• Proven track record in secure software supply chains and SBOMs.

Responsibilities

• Own the platform threat model across all deployment targets, from cloud to air-gapped.
• Define security engineering and control sets for each platform layer (infrastructure, Kubernetes, identity, data).
• Set secure-by-default contracts including templates, sandbox profiles, and network policy.
• Lead defense against agentic threat classes and prompt-injection risks.
• Define agent authority models, scope limits, and non-escalation invariants; ensure policy-controls are enforceable.

Skills

Cloud-native security

Kubernetes security

Threat modelling

Policy‑as‑code

Adversarial testing

AI security

Education

Bachelor’s or Master’s degree in CS/Security

Tools

Sigstore/Cosign

Notation

OPA/Kyverno

SPIFFE/SPIRE

Job description

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers cloud-native and platform security, including Kubernetes hardening, supply-chain integrity, and prompt-injection defenses.

Ideal candidates will drive threat modelling, red teaming, and policy-as-code with client-facing assurance in regulated environments. EY offers strong compensation and a broad benefits package.