Senior AI Security Engineer - Build Safe AI

EY; Richmond (VA); Hybrid; USD 107,000 - 193,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Flexible vacation

Job summary

EY is seeking a security-focused leader to embed AI security throughout product and engineering lifecycles in a hybrid US role. You will define patterns, run adversarial testing, and build reusable controls to reduce risk while enabling ambitious AI use cases.

Ideal candidates bring 5+ years in security across cloud, apps, and data, with hands-on experience in production controls, threat modeling, and automation. The role offers hybrid work and travel flexibility across US offices.

Qualifications

• 5+ years of relevant experience.
• Bachelor’s Degree in a relevant field.
• Substantial experience in product, application, cloud, platform, or detection security, incl. production controls.
• Threat modeling: assess complex systems and map attack paths to engineering measures.
• Production security: secure modern apps, cloud, identities, data, pipelines.
• AI systems knowledge: generative and agentic AI concepts incl. tool use and runtime behavior.
• Hands-on automation: build or extend security tests, telemetry, or reference implementations.
• Response experience: support vulnerability or incident response and translate lessons into controls.
• Cross-functional delivery: partner with engineers and risk functions respecting user value.
• Travel and On-site: up to 50% travel; hybrid office presence.

Responsibilities

• Set the security direction with reusable AI security patterns and threat models.
• Join builders early to identify attack paths and shape controls.
• Design scoped authority for identity, access, isolation, approvals, and recovery.
• Protect data across lifecycle: confidentiality, integrity, provenance, and access.
• Secure the delivery path with automated tests, policy gates, and traceable changes.
• Test adversarially through red-team exercises and convert findings into tests.
• Build runtime protections with evidence and behavioral signals for anomalies.
• Strengthen response with evidence-based containment and recovery actions.
• Advise on residual risk with concise technical recommendations to owners.
• Build shared capability by creating reusable controls and reference implementations.

Skills

Security engineering

AI threat judgment

Control engineering

Adversarial mindset

Automation capability

Pragmatic influence

Education

Bachelor's Degree in a relevant field

Job description

EY is seeking a security-focused leader to embed AI security throughout product and engineering lifecycles in a hybrid US role. You will define patterns, run adversarial testing, and build reusable controls to reduce risk while enabling ambitious AI use cases.

Ideal candidates bring 5+ years in security across cloud, apps, and data, with hands-on experience in production controls, threat modeling, and automation. The role offers hybrid work and travel flexibility across US offices.