Senior AI Security Engineer – Agentic Platform Defense

EY; Oklahoma City (OK); Remote; USD 126,000 - 230,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role spans from silicon-level attestation to prompt-injection defense and audit-grade evidence for regulated environments.

Ideal candidates have deep cloud-native security experience, strong knowledge of AI threat models, and a track record in defense, policy-as-code, and threat modelling. This is a remote US-wide opportunity offering a competitive compensation package.

Qualifications

• 10+ years in security engineering with hands-on ownership in production.
• Experience securing AI/ML systems in production, including agentic risk surfaces.
• Demonstrated threat modelling applied to real systems with verifiable controls.
• Client-facing or regulator-facing experience with audit-grade evidence requirements.

Responsibilities

• Own platform threat model including agent autonomy, tool invocation, and data supply chains.
• Define security controls for infra, Kubernetes, identity, and secure execution.
• Set secure-by-default contracts with templates, profiles, and network policy.
• Lead defense against agentic threat classes including prompt injection and tool abuse.
• Define agent authority model, delegation boundaries, and non-escalation invariants.
• Lead sandboxing standards for code execution and boundary testing.
• Secure model and knowledge supply chain with provenance and SBOM practices.
• Oversee policy governance using Kyverno/OPA and enforce secure workloads.
• Lead AI red teaming and adversarial testing before audits.
• Manage supply-chain integrity, signing, attestation, and CVE management.
• Engage with clients as security authority and produce assurance artefacts.

Skills

Cloud-native security

AI threat models

Zero-trust foundations

Policy-as-code

Threat modelling

Education

Bachelor’s degree in Computer Science, Security, or related field

Tools

SPIFFE/SPIRE

PKI and certificate lifecycle

Sigstore/Cosign

OPA/Kyverno policy engines

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. The role spans from silicon-level attestation to prompt-injection defense and audit-grade evidence for regulated environments.

Ideal candidates have deep cloud-native security experience, strong knowledge of AI threat models, and a track record in defense, policy-as-code, and threat modelling. This is a remote US-wide opportunity offering a competitive compensation package.