Senior AI Security Engineer - Platform Defense & Threats

EY; Tampa (FL); On-site; USD 125,000 - 231,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will shape threat models, implement secure-by-default controls, and defend against agentic threat classes across cloud-native environments.

You will lead AI red teaming, supply-chain integrity, and policy-as-code initiatives while engaging with clients and regulators. The role requires deep cloud-native security expertise, hands-on AI security experience, and the ability to communicate

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field.
• 10+ years in security engineering with production ownership.
• Experience in cloud-native and Kubernetes security in production.
• Hands-on with workload identity and secrets management (SPIFFE/SPIRE, Vault).
• Practical experience securing AI/LLM systems and agentic threats.

Responsibilities

• Own the platform threat model across deployments and phases.
• Define security controls for infra, Kubernetes, identity, and data.
• Set the secure-by-default contract with templates and policies.
• Lead defense against agentic threat classes like prompt injection and tool abuse.
• Define agent authority models with scope and delegation limits.
• Own sandboxing standards for agent-generated code execution.
• Secure model and knowledge supply chain, provenance and SBOM.
• Secure inter-agent protocols and tool authorization.
• Lead AI red teaming and adversarial testing before clients/auditors.
• Own supply-chain integrity, signing, attestation and CVE management.
• Define policy-as-code with Kyverno and OPA across environments.
• Define Kubernetes hardening baselines and tenant isolation.
• Serve as security authority in client engagements and regulator inquiries.
• Drive detection and response for platform security and incidents.

Skills

Kubernetes security

Cloud security

AI security

Threat modelling

Policy-as-code

Incident response

Education

Bachelor’s or Master’s in CS/Security

Tools

SPIFFE/SPIRE

Vault/OpenBB

PKI & cert lifecycle

Sigstore/Cosign

Notation

OPA/Kyverno

Job description

EY is seeking an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end. You will shape threat models, implement secure-by-default controls, and defend against agentic threat classes across cloud-native environments.

You will lead AI red teaming, supply-chain integrity, and policy-as-code initiatives while engaging with clients and regulators. The role requires deep cloud-native security expertise, hands-on AI security experience, and the ability to communicate