Senior AI Security Engineer - Platform Defense

EY; Topeka (KS); Remote; USD 120,000 - 190,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of the Agentic AI platform end to end. The role focuses on threat modeling, architecture-level defenses, and secure-by-default configurations for agent-based systems.

You will work to ensure platform integrity across cloud-native environments and regulated client contexts. This position requires deep expertise in security engineering for AI-enabled systems, red-teaming, and policy-as-code, with the ability to defend complex

Qualifications

• Platform security experience and cloud-native engineering.
• AI/ML threat modeling and red-teaming capability.
• Knowledge of Kubernetes hardening and supply-chain security.
• Experience with policy-as-code and secure-by-default configurations.
• Familiarity with agent-driven architectures and tool protocols.

Responsibilities

• Own the platform threat model across cloud-to-air-gapped environments.
• Define and implement security engineering controls for all platform layers.
• Set secure-by-default contracts for agent templates, charts, sandbox profiles, and network policies.
• Lead defense against agentic threat classes including prompt injection and abuse of tooling.
• Collaborate with architecture to define the agent authority model and boundaries.
• Own sandboxing standards for code execution and containment across the platform.
• Secure the model and knowledge supply chain including provenance and integrity.
• Oversee agent-to-agent and tool protocols with strong authentication and validation.
• Lead AI red teaming and adversarial testing to strengthen defenses.

Job description

EY is seeking an AI Security Engineer to own the security posture of the Agentic AI platform end to end. The role focuses on threat modeling, architecture-level defenses, and secure-by-default configurations for agent-based systems.

You will work to ensure platform integrity across cloud-native environments and regulated client contexts. This position requires deep expertise in security engineering for AI-enabled systems, red-teaming, and policy-as-code, with the ability to defend complex