Senior AI Security Engineer - Platform Defense

EY; Lansing (MI); Remote; USD 126,000 - 251,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking an AI Security Engineer to own the EY Agentic AI platform's security posture end to end, spanning silicon-level attestation through sandboxed execution and policy-as-code. The role emphasizes threat modelling, red teaming, and client-facing assurance with regulators.

The ideal candidate brings deep cloud-native security expertise, experience with AI threat models, and a pragmatic approach to securing autonomous agent systems in regulated environments.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field, or demonstrably equivalent depth.
• 10+ years in security engineering or related field, including hands-on production ownership.
• Experience in cloud-native security, Kubernetes, and AI security is preferred.

Responsibilities

• Own the platform threat model across agent autonomy and multi-tenant deployments.
• Define the security engineering and control set for all platform layers.
• Lead security testing, threat modelling, and compliance artefacts for client engagements.
• Drive secure-by-default contracts and sandboxing standards.
• Own defense against agentic threat classes and supply-chain integrity.

Skills

Cloud-native security

Kubernetes security

Threat modelling

Policy-as-code

AI security

Red team

Zero trust

Education

Bachelor's degree in Computer Science or related

10+ years security experience

Tools

Sigstore/Cosign

SPIFFE/SPIRE

OPA/Kyverno

Job description

EY is seeking an AI Security Engineer to own the EY Agentic AI platform's security posture end to end, spanning silicon-level attestation through sandboxed execution and policy-as-code. The role emphasizes threat modelling, red teaming, and client-facing assurance with regulators.

The ideal candidate brings deep cloud-native security expertise, experience with AI threat models, and a pragmatic approach to securing autonomous agent systems in regulated environments.