Senior AI Security Engineer: Platform Threat Defense

EY; Buffalo (NY); Remote; USD 126,000 - 262,000; Full time

Benefits offered by this job

Medical and dental coverage

Paid time off options

Flexible vacation policy

Job summary

EY seeks an AI Security Engineer to secure EY’s Agentic AI platform end to end, spanning cloud-native infrastructure, model and data supply chains, and sandboxed execution. You’ll own threat modeling, security engineering controls, and policy-vetted deployments across on-prem and cloud targets, with client-facing assurance responsibilities and red-teaming leadership.

The role emphasizes defense against prompt injection, materializing security contracts, and maintaining audit-grade evidence for

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field.
• 10+ years in security engineering with production ownership.
• Deep cloud-native and Kubernetes security in production.
• Hands-on experience securing AI/ML systems and agentic surfaces.
• Threat modelling applied to real systems with verified controls.
• Compliance-focused with audit-grade evidence in regulated environments.
• Ability to define ownership boundaries with platform teams.

Responsibilities

• Own the platform threat model across deployment targets and evolutions.
• Define security engineering and control sets for all platform layers.
• Set secure-by-default contracts including agent templates and policies.
• Defend against agentic threat classes and prompt injection.
• Define the agent authority model and delegation boundaries.
• Own sandboxing standards for agent-generated code execution.
• Secure model and knowledge supply chain including SBOM and attestation.
• Secure agent-to-agent and tool protocols and registrations.
• Lead AI red teaming and adversarial testing cadence.
• Own end-to-end supply-chain integrity and artifact signing.
• Own admission and runtime policy with policy-as-code tools.
• Define Kubernetes and infrastructure hardening baselines.
• Own tenant isolation assurance and cross-tenant leakage testing.
• Serve as security authority in client engagements and reviews.
• Drive security detection and response for platform telemetry and incidents.

Skills

Cloud-native security

AI and agentic threat models

Zero-trust & workload identity

Policy-as-code

Security engineering

Threat modelling

Communications to executives/regulator

Security automation

Education

Bachelor’s or Master’s in CS/Security/related field

Tools

SPIFFE/SPIRE

Vault/OpenBao

PKI & certificate lifecycle

Sigstore/Cosign

Job description

EY seeks an AI Security Engineer to secure EY’s Agentic AI platform end to end, spanning cloud-native infrastructure, model and data supply chains, and sandboxed execution. You’ll own threat modeling, security engineering controls, and policy-vetted deployments across on-prem and cloud targets, with client-facing assurance responsibilities and red-teaming leadership.

The role emphasizes defense against prompt injection, materializing security contracts, and maintaining audit-grade evidence for