Senior AI Security Architect – Agentic Platform

Ernst & Young Oman; Columbia (SC); Remote; USD 180,000 - 260,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the end-to-end security posture of EY’s Agentic AI platform. You will shape threat models, implement secure-by-default controls, and lead red teaming across cloud-native environments.

The role requires deep Kubernetes/security expertise, experience with AI threat surfaces, and a track record delivering audit-grade security in regulated settings. Ideal candidates will have extensive SRE/SEC background, hands-on policy-as-code experience, and the

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field, or demonstrably equivalent depth.
• 10+ years in security engineering with hands-on production ownership.
• Depth in cloud-native and Kubernetes security across admission, network, and runtime.
• Experience securing AI/ML systems including prompt injection and data risk.
• Threat modelling applied to real systems with verifiable controls.
• Compliance-driven delivery with audit-grade evidence.

Responsibilities

• Own platform threat model across agent autonomy, tool invocation, and data supply chain.
• Define security engineering controls for infra, Kubernetes, identity, and data protection.
• Establish secure-by-default contracts and templates for platform capabilities.
• Lead AI red teaming and adversarial testing before deployment.
• Own supply-chain integrity, SBOM, attestation, and CVE management.
• Define policy-as-code and guardrails to enforce security in workloads.
• Define Kubernetes hardening baselines and tenant isolation.
• Serve as security authority in client engagements and regulator reviews.

Skills

Kubernetes security

AI threat models

Zero-trust

Policy-as-code

Software supply-chain security

Threat modelling

Agent authority model

Red teaming & adversarial testing

Security threat detection

Client engagement

Education

Bachelor’s or Master in CS or Security

Tools

SPIFFE/SPIRE

PKI & certificate lifecycle

Cosign/Sigstore

Vault / secret management

Job description

EY is seeking an AI Security Engineer to own the end-to-end security posture of EY’s Agentic AI platform. You will shape threat models, implement secure-by-default controls, and lead red teaming across cloud-native environments.

The role requires deep Kubernetes/security expertise, experience with AI threat surfaces, and a track record delivering audit-grade security in regulated settings. Ideal candidates will have extensive SRE/SEC background, hands-on policy-as-code experience, and the