Senior AI Security Engineer - Agentic Platform Defense

Ernst & Young Oman; Baton Rouge (LA); Remote; USD 126.000 - 262.000; Vollzeit

Zusammenfassung

EY is seeking an AI Security Engineer to own the security posture of its agentic AI platform end to end, including threat modeling, platform hardening, and supply-chain integrity. The role requires deep cloud-native security expertise, AI threat modeling, and hands-on policy-as-code experience.

You will lead red teaming and defend across audits and regulators. The position emphasizes governance, secure-by-default configurations, and collaboration with architecture to define agent authority and

Qualifikationen

• 10+ years in security engineering with production ownership.
• Deep cloud-native security expertise (Kubernetes, container, prod scale).
• Familiarity with AI/agentic threat models and prompt injection risk.
• Experience with policy-as-code (OPA, Kyverno) and workload identity.
• Knowledge of software supply-chain security and SBOMs.

Aufgaben

• Own the platform threat model across cloud to air-gapped deployments and keep it current as the platform evolves.
• Define security engineering and control sets for infrastructure, Kubernetes, identity, sandboxing, data, and telemetry.
• Lead AI red teaming and adversarial testing to validate guardrails and authority boundaries.
• Secure the model and knowledge supply chain including provenance, SBOM, and registry governance.
• Serve as the security authority in client engagements, responding to CISOs and regulators.
• Drive security detection and response with telemetry, incidents, and playbooks.

Kenntnisse

Cloud-native security

AI security

Zero Trust

Policy-as-code

Threat modelling

Red team testing

Supply-chain security

Ausbildung

Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field

Tools

SPIFFE/SPIRE

Sigstore/Cosign

Kyverno

OPA

Vault

Jobbeschreibung

EY is seeking an AI Security Engineer to own the security posture of its agentic AI platform end to end, including threat modeling, platform hardening, and supply-chain integrity. The role requires deep cloud-native security expertise, AI threat modeling, and hands-on policy-as-code experience.

You will lead red teaming and defend across audits and regulators. The position emphasizes governance, secure-by-default configurations, and collaboration with architecture to define agent authority and