Senior AI Security Architect & Platform Threat Lead

EY; Baltimore (MD); On-site; USD 125,000 - 250,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will shape threat models, implement secure-by-default controls, and lead red-teaming against agentic threats while coordinating with clients and regulators.

The role focuses on cloud-native security, supply-chain integrity, and policy enforcement across the platform, from silicon attestation to runtime and governance.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field.
• 10+ years of security engineering/production ownership.
• Deep cloud-native and Kubernetes security in production.
• Hands-on with AI/LLM threat surfaces and agentic risk.
• Experience defining ownership boundaries with platform teams.

Responsibilities

• Own platform threat model across all deployment targets.
• Define security engineering and control set for all layers.
• Set secure-by-default contracts with templates and policies.
• Lead defense against agentic threat classes and prompt injection.
• Define agent authority models and sandboxing standards.
• Own supply-chain integrity and SBOM/guidance.

Skills

Cloud-native security

AI threat models

Zero-trust & workload identity

Policy-as-code

Software supply-chain security

Offensive security mindset

Risk-based decision-making

Communication with regulators

Education

Bachelor’s or Master’s in CS or Security

10+ years in security engineering

Tools

SPIFFE/SPIRE

PKI & certificate lifecycle

Sigstore/Cosign

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will shape threat models, implement secure-by-default controls, and lead red-teaming against agentic threats while coordinating with clients and regulators.

The role focuses on cloud-native security, supply-chain integrity, and policy enforcement across the platform, from silicon attestation to runtime and governance.