Principal AI Security Engineer — Platform Defense

EY; Rogers (AR); Remote; USD 126,000 - 262,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Flexible vacation policy

Job summary

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end, including threat modeling, policy enforcement, and secure execution across cloud, on‑prem, and air‑gapped deployments.

This role demands deep cloud-native security, experience with AI threat models, and the ability to communicate with CISOs and regulators. Join EY to help secure enterprise AI at scale.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field.
• 10+ years in security engineering or offensive security with hands-on ownership.
• Deep cloud-native and Kubernetes security experience in production.
• Practical experience securing AI or ML systems in production, incl. prompt injection & agentic risk.
• Threat modelling capability applied to real systems with verifiable controls.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, delegated authority, data supply chain, and multi-tenancy.
• Define security engineering and control sets for infrastructure, Kubernetes, identity, secure execution, and telemetry.
• Set secure-by-default contracts for templates, Helm charts, sandbox profiles, and network policies.
• Lead AI red-teaming and adversarial testing, including guardrails and authorization boundaries.
• Own supply-chain integrity end-to-end: signing, SBOM, attestation, and CVE management.
• Define and implement policy-as-code across Kyverno and OPA; enforce signature verification and PS standards.

Skills

AI security

Kubernetes security

Threat modelling

Policy-as-code

Cloud security

Education

Bachelor’s or Master’s degree in Computer Science or Security

Tools

Sigstore/Cosign

Kyverno

OPA

Spiffe/SPIRE

Job description

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end, including threat modeling, policy enforcement, and secure execution across cloud, on‑prem, and air‑gapped deployments.

This role demands deep cloud-native security, experience with AI threat models, and the ability to communicate with CISOs and regulators. Join EY to help secure enterprise AI at scale.