Senior AI Security Engineer — Agentic Platform Defense

EY; Tulsa (OK); Remote; USD 126,000 - 230,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of the Agentic AI platform, spanning from silicon-level attestation to runtime policy and auditing for regulated environments. The role requires deep cloud-native security, AI threat modeling, and abuse defense across platform layers.

You will lead security reviews with clients and regulators, define defense-in-depth controls, and shepherd threat models and SBOM governance across the stack.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field.
• 10+ years in security engineering or offensive security with hands-on ownership.
• Demonstrable depth in cloud-native and Kubernetes security: admission control, network policy, workload isolation, and runtime security.
• Hands-on experience with workload identity and secrets management (SPIFFE/SPIRE, Vault/OpenBao or equivalents).
• Practical experience securing AI or ML systems in production, incl. prompt injection and agentic risk.
• Threat modelling applied to real systems with evidence of built controls.
• Experience delivering under compliance or regulatory constraints with audit-grade evidence.
• Client-facing or consulting background with credibility before CISOs/auditors.

Responsibilities

• Own platform threat model across agent autonomy, tool invocation, and multi-tenant deployments.
• Define security engineering and control sets for infra, Kubernetes, identity, sandboxing, and telemetry.
• Set secure-by-default contracts with agent templates, Helm charts, and network policies.
• Lead defense against agentic threat classes and defense against prompt injection.
• Define agent authority and scope with governance for delegation and consent boundaries.
• Own sandboxing standards for agent-generated code execution and boundary tests.
• Secure the model and knowledge supply chain: SBOM, provenance, signing.
• Secure agent-to-agent and tool protocols: discovery, registration, validation, authorization.
• Lead AI red teaming and adversarial testing cadence before deployment.
• Own supply-chain integrity: signing, attestation, SBOM, vulnerability management.
• Own admission and runtime policy via Kyverno and OPA.
• Define Kubernetes hardening baselines: CIS benchmarks, network defaults.
• Ensure tenant isolation and cross-tenant security.
• Serve as security authority in client engagements with clients and regulators.
• Drive detection and response for platform security and incident handling.

Skills

Security engineering

Threat modelling

Kubernetes security

Policy-as-code

AI security

Red teaming

Supply chain security

Incident response

Client engagements

Regulatory evidence

Education

Bachelor’s or Master’s degree in Computer Science, Security, or related field

Tools

SPIFFE/SPIRE

PKI

Sigstore/Cosign

Notation

OPA/Kyverno

Job description

EY is seeking an AI Security Engineer to own the security posture of the Agentic AI platform, spanning from silicon-level attestation to runtime policy and auditing for regulated environments. The role requires deep cloud-native security, AI threat modeling, and abuse defense across platform layers.

You will lead security reviews with clients and regulators, define defense-in-depth controls, and shepherd threat models and SBOM governance across the stack.