Senior AI Security Engineer – Platform Threat Defense

EY; Atlanta (GA); Remote; USD 126,000 - 230,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY is actively seeking an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end. The role covers threat modeling, hardening, policy-as-code, and rigorous assurance across cloud-native stacks and regulated client environments.

You will lead security reviews, drive defense against agentic threat classes, and partner with architecture and client stakeholders to deliver audit-ready security artefacts.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related field, or demonstrably equivalent depth.

Responsibilities

• Own the platform threat model across deployment targets.
• Define security controls for infra, Kubernetes, identity, data, and telemetry.
• Set secure-by-default contracts for templates, Helm charts, and network policies.
• Defend against agentic threat classes including prompt injection and jailbreak.
• Define the agent authority model with delegation depth and consent boundaries.
• Own sandboxing standards for agent-generated code execution and isolation boundaries.
• Secure model and knowledge supply chain: provenance, SBOM, attestations.
• Secure agent-to-agent and tool protocols including discovery trust and authorization.
• Lead AI red teaming and adversarial testing before client audits.
• Own supply-chain integrity end to end: signing, attestation, CVE management.

Skills

Cloud-native security

AI threat models

Zero-trust

Policy-as-code

Supply-chain security

Offensive security

Compliance mindset

Platform security

Stakeholder communication

Education

Bachelor’s or Master’s degree in CS/Security

Job description

EY is actively seeking an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end. The role covers threat modeling, hardening, policy-as-code, and rigorous assurance across cloud-native stacks and regulated client environments.

You will lead security reviews, drive defense against agentic threat classes, and partner with architecture and client stakeholders to deliver audit-ready security artefacts.