Senior AI Security Architect – Agentic Platform Defense

EY; Chicago (IL); Remote; USD 150,000 - 230,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will drive cloud-native security from silicon attestation to sandboxed execution, focusing on risk, compliance, and client engagements.

You will define threat models, implement secure-by-default controls, lead red teaming, and ensure supply chain integrity across the platform. Collaboration with architecture, security, and client teams is essential.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field.
• 10+ years in security engineering, security engineering, or offensive security with hands-on ownership.
• Demonstrable depth in cloud-native and Kubernetes security and workload identity.

Responsibilities

• Own platform threat model covering agent autonomy, tool invocation, delegated authority, and multi-tenant security.
• Define security engineering and control set for every platform layer including Kubernetes, identity, and secure execution.
• Set secure-by-default contract with hardened templates, sandbox profiles, and network policies.
• Lead defense against agentic threat classes including prompt injection and tool abuse.
• Define agent authority model and ensure policy-as-code enforcement across the stack.
• Own sandboxing standards for agent-generated code execution and runtime policy.

Skills

Cloud-native security

AI security

Threat modelling

Policy-as-code

Red teaming

Kubernetes security

Education

Bachelor’s or Master’s in CS/Security

Tools

Sigstore/Cosign

Open Policy Agent (OPA)

Kyverno

SPIFFE/SPIRE

Kubernetes

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will drive cloud-native security from silicon attestation to sandboxed execution, focusing on risk, compliance, and client engagements.

You will define threat models, implement secure-by-default controls, lead red teaming, and ensure supply chain integrity across the platform. Collaboration with architecture, security, and client teams is essential.