Senior AI Security Engineer — Platform & Agentic Defense

EY; Kansas City (MO); Hybrid; USD 126,000 - 262,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Flexible vacation policy

Paid time off

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will shape secure-by-default platform capabilities spanning cloud-native security, supply-chain integrity, and agentic threat models.

The role requires deep cloud-native security, Kubernetes hardening, and hands-on threat modelling, with the ability to present assurance artefacts to clients, CISOs, and regulators across regulated environments.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field.
• 10+ years in security engineering or offensive security with production ownership.
• Demonstrable depth in cloud-native and Kubernetes security, including runtime and network controls.
• Hands-on experience with workload identity and secrets management (SPIFFE/SPIRE, Vault).
• Practical experience securing AI/ML systems and agentic threat surfaces (prompt injection, tool abuse).

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and multi-tenant deployment.
• Define security controls for infrastructure, Kubernetes, identity, and data, with policy-as-code.
• Lead defense against agentic threat classes and maintain containment boundaries.
• Conduct AI red teaming, threat modelling, and security reviews for client engagements.
• Drive supply-chain integrity, artifact signing, SBOM, and attestation across the platform.

Skills

Cloud-native security

AI security

Zero-trust

Policy-as-code

Threat modelling

Communication

Regulatory engagement

Education

Bachelor’s or Master’s in CS/Security

Tools

Sigstore/Cosign

Notation

SPIFFE/SPIRE

PKI

OPA/Kyverno

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will shape secure-by-default platform capabilities spanning cloud-native security, supply-chain integrity, and agentic threat models.

The role requires deep cloud-native security, Kubernetes hardening, and hands-on threat modelling, with the ability to present assurance artefacts to clients, CISOs, and regulators across regulated environments.