Senior AI Security Engineer – AI-First Safeguards

EY; Cincinnati (OH); Hybrid; USD 107,000 - 193,000; Full time

Benefits offered by this job

Flexible vacation policy

Medical and dental coverage

Pension and 401(k) plans

Job summary

EY is seeking a security leader to embed robust AI security controls across data, tools, and processes. You will partner with product and engineering teams to design, validate, and enforce reusable patterns, reference architectures, and threat models that protect ambitious AI use cases.

The Challenger program drives next‑gen services, with small, focused teams testing ideas in real conditions. Challenger Core maintains shared tech, methods, and guardrails to accelerate safe delivery.

Qualifications

• Security engineering depth in application, cloud, platform, identity, data, and software delivery security.
• AI threat judgment: model prompts, agents, tools, users, and external services attack paths.
• Control engineering: translate threats into preventive, detective, and responsive measures.
• Adversarial mindset: red teaming, reproducible testing, vulnerability analysis, detection, and incident learning.
• Automation capability: build security tests, controls, telemetry, and reference components.
• Pragmatic influence: clear communication and risk judgment with minimal drama or ambiguity.
• Threat modeling: assess complex systems and turn attack paths into practical measures.
• Production security: secure modern applications, cloud environments, identities, data, networks, and pipelines.
• AI systems knowledge: understanding generative and agentic AI, retrieval, model access, tool use, evaluation, runtime behavior.
• Hands‑on automation: build/ext security tests, controls, telemetry, reference implementations, or adversarial assessments.
• Response experience: support vulnerability/incidence response and translate lessons into stronger controls.
• Cross‑functional delivery: partner with engineers and risk to improve security while preserving value.
• Travel and On‑site requirements: up to 50% travel and hybrid office capability.

Responsibilities

• Set the security direction. Own reusable AI security patterns, control objectives, reference architectures, and threat models aligned to the risk and autonomy of each use case.
• Join builders early. Work with teams before key design choices are fixed, identifying credible attack paths and shaping controls that fit the product and delivery model.
• Design scoped authority. Create practical patterns for identity, access, isolation, approvals, and recovery so tool-using AI acts within clear boundaries.
• Protect sensitive information. Embed security across the data lifecycle, preserving confidentiality, integrity, provenance, permitted use, and monitored access.
• Secure the delivery path. Integrate automated security tests, policy gates, trusted artifacts, traceable changes, and safe rollback into engineering workflows.
• Test adversarially. Run focused red-team exercises against AI-specific abuse cases and convert findings into repeatable tests and stronger patterns.
• Build runtime protection. Use evidence and signals to detect abnormal actions, privilege misuse, and exfiltration attempts.
• Strengthen response. Support vulnerability triage and incidents with evidence, containment options, recovery actions, and lessons.
• Advise on residual risk. Provide concise technical recommendations to product and risk leaders with accountable owners.
• Build shared capability. Create reference implementations, coach engineers, and turn production lessons into reusable controls.

Skills

Security engineering depth

AI threat judgment

Control engineering

Adversarial mindset

Automation capability

Pragmatic influence

Threat modeling

Production security

AI systems knowledge

Hands‑on automation

Response experience

Cross‑functional delivery

Travel and On‑site requirements

Education

Bachelor’s Degree in a relevant field

Job description

EY is seeking a security leader to embed robust AI security controls across data, tools, and processes. You will partner with product and engineering teams to design, validate, and enforce reusable patterns, reference architectures, and threat models that protect ambitious AI use cases.

The Challenger program drives next‑gen services, with small, focused teams testing ideas in real conditions. Challenger Core maintains shared tech, methods, and guardrails to accelerate safe delivery.