Senior AI Security Architect for Agentic Platform

Ernst & Young Oman; San Jose (CA); Remote; USD 140,000 - 190,000; Full time

Job summary

EY seeks an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end. The role requires deep cloud-native and platform security expertise, with responsibilities spanning threat modeling, secure-by-default design, sandboxing, and defense against agentic threats.

The candidate will lead red teaming, define authority models, and ensure secure execution across a complex, multi-tenant environment in support of EY's regulated client engagements.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, delegated authority, data supply chain, and multi-tenancy across deployment targets from cloud to air-gapped.
• Define the security engineering and control set for every platform layer: infrastructure, boot chain, Kubernetes, identity and secrets, secure execution and sandboxing, gateway, data, telemetry.
• Set the secure-by-default contract so that platform capabilities arrive hardened, including agent templates, Helm charts, sandbox profiles, and network policy with correct controls.
• Own defense against agentic threat classes including prompt injection, jailbreak, excessive agency, confused-deputy and authority-escalation attacks, tool and function-call abuse, memory and context poisoning, and data exfiltration.
• Work with architecture to define the agent authority model: delegated authority, scope and delegation-depth limits, consent boundaries, and the non-escalation invariant that an agent never exceeds the authority of its initiating principal at any hop.
• Own the sandboxing security standard for agent-generated code execution: isolation boundaries, filesystem and credential scope, egress restriction, resource containment, and the escape-test suite.
• Secure the model and knowledge supply chain: model provenance and integrity, upstream registry governance, poisoning and backdoor risk, embedding and vector-store integrity.
• Secure agent-to-agent and tool protocols including discovery trust, tool registration and approval, schema validation, and authorization of inter-agent calls.
• Lead AI red teaming and adversarial testing: build the offensive capability and the

Job description

EY seeks an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end. The role requires deep cloud-native and platform security expertise, with responsibilities spanning threat modeling, secure-by-default design, sandboxing, and defense against agentic threats.

The candidate will lead red teaming, define authority models, and ensure secure execution across a complex, multi-tenant environment in support of EY's regulated client engagements.