Senior AI Security Architect & Platform Defense Lead

EY; St. Louis (MO); Remote; USD 170,000 - 230,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of its Agentic AI platform end to end. The role covers threat modeling, platform hardening, supply-chain integrity, and adversarial testing across cloud-native stacks and regulated environments.

You will define guardrails, policies, and containment strategies to protect client data and comply with risk governance. The position demands deep security leadership, architecture collaboration, and hands-on validation from silicon to

Qualifications

• Demonstrated depth in cloud-native and platform security.
• Experience writing threat models and performing red-teaming exercises.
• Ability to define guardrails and policy-as-code for security controls.

Responsibilities

• Own the platform threat model across all deployment targets.
• Define the security engineering and control set for each platform layer.
• Set the secure-by-default contract with hardened capabilities.
• Lead defense against agentic threat classes and prompt-injection risks.
• Define the agent authority model with delegated scope and limits.
• Own sandboxing standards for agent-generated code execution.
• Secure the model and knowledge supply chain integrity.
• Secure agent-to-agent and tool protocols with verification and authorization.
• Lead AI red teaming and adversarial testing cadences.
• Own supply-chain integrity from artifacts to SBOM and attestation.
• Own admission and runtime policy across policy-as-code.
• Define Kubernetes and infrastructure hardening baselines.
• Ensure tenant isolation and cross-tenant safety.
• Act as the security authority in client engagements.

Skills

Threat modeling

Kubernetes security

Red teaming

Policy as code

Job description

EY is seeking an AI Security Engineer to own the security posture of its Agentic AI platform end to end. The role covers threat modeling, platform hardening, supply-chain integrity, and adversarial testing across cloud-native stacks and regulated environments.

You will define guardrails, policies, and containment strategies to protect client data and comply with risk governance. The position demands deep security leadership, architecture collaboration, and hands-on validation from silicon to