Senior AI Security Engineer - Agentic Platform

Ernst & Young Oman; Indianapolis (IN); Remote; USD 126,000 - 230,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers security across cloud-native infrastructure, Kubernetes, identity, and supply-chain integrity to defend against agentic threats.

The candidate will lead threat modeling, red-teaming, policy-as-code, and sandboxing standards, communicating with CISOs and regulators as the security authority for client engagements.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field
• 10+ years in security engineering or offensive security
• Hands-on production ownership of security engineering
• Deep cloud-native and Kubernetes security experience in production
• Experience securing AI/ML systems and agentic threat surfaces
• Threat modeling applied to real systems with verifiable controls
• Experience delivering under compliance with audit-grade evidence

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and data supply chain
• Define security engineering and control sets for all platform layers (infrastructure, Kubernetes, identities, secure execution)
• Set the secure-by-default contract for platform capabilities (templates, Helm charts, sandbox profiles)
• Defend against agentic threat classes including prompt injection and tool abuse
• Define agent authority models and non-escalation invariants
• Own sandboxing standards for agent-generated code execution
• Secure model and knowledge supply chains (SBOM, provenance, verifications)
• Secure inter-agent protocols and governance for tool usage and authorization
• Lead AI red-teaming and adversarial testing
• Own supply-chain integrity across artifacts, signing, and attestations
• Define policy-as-code and enforce runtime controls (Kyverno, OPA)
• Set Kubernetes and infrastructure hardening baselines ( CIS, network defaults)
• Ensure tenant isolation and cross-tenant safety
• Engage with clients as security authority and provide assurance artifacts
• Drive detection and response for platform security incidents

Skills

Cloud-native security

Kubernetes security

Container security

Threat modeling

Policy and risk governance

Education

Bachelor’s or Master’s in Computer Science or Security

Tools

SPIFFE/SPIRE

Sigstore/Cosign

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers security across cloud-native infrastructure, Kubernetes, identity, and supply-chain integrity to defend against agentic threats.

The candidate will lead threat modeling, red-teaming, policy-as-code, and sandboxing standards, communicating with CISOs and regulators as the security authority for client engagements.