Senior AI Security Engineer: Build Safe AI Systems

EY; City of Albany (NY); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Flexible vacation policy

Job summary

EY is seeking a security-focused professional to embed governance and defense in AI systems. You will partner with product and engineering teams to prove controls under adversarial conditions, replacing one-off reviews with reusable patterns and measurable coverage.

The role emphasizes scalable security across data, tools, and processes. The candidate will design practical security controls, run red-team exercises, and build run‑time protections while advising on residual risk and ensuring

Qualifications

• 5+ years of relevant experience.
• Experience in product, application, cloud, platform, or detection security with hands-on ownership of production controls.
• Threat modeling: ability to assess complex systems and turn attack paths into practical engineering measures.
• Production security: securing modern applications, cloud environments, identities, data, and pipelines.
• AI systems knowledge: working understanding of generative and agentic AI, including retrieval, model access, tool use, evaluation, and runtime behavior.
• Hands-on automation: building or extending security tests, controls, telemetry, or adversarial assessments.
• Response experience: supporting vulnerability or incident response and translating lessons into stronger controls.
• Cross-functional delivery: partnering with engineers and risk functions to improve security while maintaining delivery value.
• Travel and on-site: up to 50% travel with hybrid office requirements.

Responsibilities

• Set the security direction with reusable AI security patterns and threat models.
• Engage with teams early to identify attack paths and shape controls.
• Design patterns for identity, access, isolation, approvals, and recovery.
• Embed security across the data lifecycle preserving confidentiality and integrity.
• Integrate automated security tests, policy gates, and traceable changes into pipelines.
• Conduct focused red-team exercises and translate findings into repeatable tests.
• Build runtime protection with evidence and behavioral signals for anomaly detection.
• Support vulnerability triage and incidents with clear evidence and recovery actions.
• Provide concise technical recommendations to product and risk leaders.
• Create reusable controls and coach engineers to adopt safer patterns.

Skills

Security engineering depth

AI threat judgment

Control engineering

Adversarial mindset

Automation capability

Pragmatic influence

Education

Bachelor’s Degree

Job description

EY is seeking a security-focused professional to embed governance and defense in AI systems. You will partner with product and engineering teams to prove controls under adversarial conditions, replacing one-off reviews with reusable patterns and measurable coverage.

The role emphasizes scalable security across data, tools, and processes. The candidate will design practical security controls, run red-team exercises, and build run‑time protections while advising on residual risk and ensuring