Senior AI Security Engineer — Agentic Platform

Ernst & Young Oman; Woodbridge Township (NJ); Remoto; USD 150.000 - 250.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive salary

Flexible schedule

Health benefits

Descrizione del lavoro

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers threat modeling, secure-by-default contracts, and defense against sophisticated agentic threats across cloud-native infrastructure and AI systems.

You will lead security reviews, define authority models, and drive supply-chain integrity and runtime policy enforcement, working with regulators and clients to ensure compliant, auditable deployments.

Competenze

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field.
• 10+ years in security engineering, security engineering, or offensive security with production ownership.
• Demonstrable depth in cloud-native and Kubernetes security: admission control, network policy, workload isolation, and runtime security.
• Hands-on experience with workload identity and secrets management and PKI/certificate lifecycle.
• Practical experience securing AI or ML systems in production, incl. prompt injection & data supply-chain risk.
• Threat modelling applied to real systems with verifiable controls.

Mansioni

• Own the platform threat model including agent autonomy, tool invocation, and multi-tenancy across deployments.
• Define security engineering and controls for each platform layer: infra, Kubernetes, identity, secure execution, telemetry.
• Set secure-by-default contracts in templates, charts, sandboxes, and network policies.
• Lead defense against agentic threat classes and adversarial testing before clients or regulators.
• Collaborate with architecture to define agent authority models, scope, and delegation limits.
• Own sandboxing standards for agent-generated code and runtime policy enforcement.
• Secure the model and knowledge supply chain, including provenance and SBOM.
• Define secure protocols for agent-to-agent and tool interactions; validate with authorization.
• Lead AI red teaming and measurable guardrails tests across the stack.
• Drive supply-chain integrity from signing to CVE management and license governance.
• Attend client engagements as security authority and provide assurance artefacts.
• Drive detection and response capabilities for agentic misbehavior and incident readiness.

Conoscenze

Platform security

AI threat models

Zero trust

Policy-as-code

Software supply-chain

Offensive-security mindset

Communication

Risk pragmatism

Security leadership

Formazione

Bachelor’s or Master’s degree in Computer Science, Security, or related field

Strumenti

Sigstore/Cosign

Notation

Kyverno

OPA

SPIFFE/SPIRE

Descrizione del lavoro

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers threat modeling, secure-by-default contracts, and defense against sophisticated agentic threats across cloud-native infrastructure and AI systems.

You will lead security reviews, define authority models, and drive supply-chain integrity and runtime policy enforcement, working with regulators and clients to ensure compliant, auditable deployments.