Senior AI Security Engineer - Agentic Platform Defense

Ernst & Young Oman; Madison (WI); Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Flexible work

Health benefits

Remote-friendly

Job summary

EY is seeking an AI Security Engineer to own the security posture of the Agentic AI platform end to end. You will tackle threat modeling, secure by default controls, sandboxing, and defense against agentic threats across cloud to air-gapped deployments.

The role requires deep cloud-native and platform security expertise, with emphasis on threat modeling, policy-as-code, and defending engineering to client CISOs and regulators.

Responsibilities

• Own the platform threat model: cover agent autonomy, tool invocation, delegated authority, model and data supply chain, multi-tenancy, and deployments from cloud to air-gapped.
• Define the security engineering and control set for every platform layer: infrastructure and boot chain, Kubernetes, identity and secrets, secure execution and sandboxing, gateway and egress, data and state, delivery pipeline, telemetry.
• Set the secure-by-default contract so platform capabilities arrive hardened, including agent templates, Helm charts, sandbox profiles, and network policy with correct controls.
• Own defense against agentic threat classes including prompt injection, jailbreak, excessive agency, and retrieval-augmented data exfiltration.
• Work with architecture to define the agent authority model: delegated authority, scope, consent boundaries, and non-escalation invariants.
• Own the sandboxing security standard for agent-generated code execution: isolation, filesystem/credential scope, egress restrictions, resource containment, and escape-test suite.
• Secure the model and knowledge supply chain: provenance, registry governance, poisoning risks, embedding and vector-store integrity.
• Secure agent-to-agent and tool protocols: discovery trust, tool registration/approval, schema validation, and inter-agent call authorization.
• Lead AI red teaming and adversarial testing: build the offensive capability and the defensive posture

Job description

EY is seeking an AI Security Engineer to own the security posture of the Agentic AI platform end to end. You will tackle threat modeling, secure by default controls, sandboxing, and defense against agentic threats across cloud to air-gapped deployments.

The role requires deep cloud-native and platform security expertise, with emphasis on threat modeling, policy-as-code, and defending engineering to client CISOs and regulators.