Senior AI Security Engineer – Agentic Platform Defense

Ernst & Young Oman; Chattanooga (TN); Remote; USD 126,000 - 230,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension/401(k) plan

Paid time off

Flexible vacation policy

Job summary

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers cloud-native security, threat modelling, defense against prompt injection, and supply-chain integrity across the stack from silicon to policy.

You will lead red teaming, enforce policy-as-code, and defend client environments in regulated industries. The position emphasizes collaboration with architecture, security engineering, and client-facing assurance activities, with a focus

Qualifications

• Bachelor’s or Master’s degree in CS, Security, or a related field.
• 10+ years in security engineering with hands-on ownership.
• Deep cloud-native and Kubernetes security experience in production.
• Practical experience securing AI/ML systems with agentic risk.

Responsibilities

• Own the platform threat model for agent autonomy and data flow.
• Define security controls for infrastructure, Kubernetes, identity, and data.
• Lead defense against agentic threat classes including prompt injection.
• Define the agent authority model with delegation and scope.
• Own sandboxing standards for safe code execution.
• Secure model and knowledge supply chain (SBOM, attestation).
• Lead AI red teaming and adversarial testing.
• Engage with client CISOs and regulators with assurance artefacts.
• Drive security detection and incident response workflows.

Skills

Kubernetes security

Cloud-native security

Threat modelling

Red teaming

Policy-as-code

AI security

Supply-chain security

Incident response

Security architecture

DevSecOps

Education

Bachelor’s or Master’s degree in Computer Science or Security

Tools

SPIFFE/SPIRE

Sigstore/Cosign

Notation

Kyverno

OPA

Job description

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role covers cloud-native security, threat modelling, defense against prompt injection, and supply-chain integrity across the stack from silicon to policy.

You will lead red teaming, enforce policy-as-code, and defend client environments in regulated industries. The position emphasizes collaboration with architecture, security engineering, and client-facing assurance activities, with a focus