Senior AI Security Engineer: Platform Threat Defense

EY; Cincinnati (OH); Remote; USD 126,000 - 230,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits package

Flexible vacation

Job summary

EY is seeking an AI Security Engineer to own EY’s Agentic AI platform security end to end. You will address threat modeling, sandboxed execution, and supply-chain integrity across cloud, on‑prem, and air-gapped environments.

You will lead red‑team exercises, policy‑as‑code enforcement, and client engagements with CISOs and regulators, ensuring defense-in-depth and audit-ready evidence. This role is remote across the United States.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field, or demonstrably equivalent depth.
• 10+ years in security engineering, security engineering, or offensive security, including hands-on production ownership.
• Demonstrable depth in cloud-native and Kubernetes security: admission control, network policy, workload isolation, and runtime security in production.
• Hands-on experience with workload identity and secrets management and with PKI and certificate lifecycle.
• Practical experience securing AI or ML systems in production, including familiarity with LLM and agentic attack surfaces.

Responsibilities

• Own the platform threat model across deployment targets from cloud to air-gapped environments.
• Define security engineering and control sets for all platform layers including Kubernetes, identity, and secure execution.
• Set secure-by-default contracts for agent templates, Helm charts, and sandbox profiles.
• Lead defense against agentic threat classes like prompt injection and tool abuse.
• Define the agent authority model, scope limits, and consent boundaries.
• Own the sandboxing security standard for agent-generated code execution.
• Secure the model and knowledge supply chain, including SBOM and attestation.
• Secure agent-to-agent and tool protocols with proper authorization and validation.
• Lead AI red teaming and adversarial testing before client audits.
• Own end-to-end supply-chain integrity, signing, and provenance.

Skills

Cloud-native security

AI security

Zero-trust

Policy-as-code

Threat modelling

Red teaming

Incident response

Clear communication

Education

Bachelor’s or Master’s degree in CS or Security

10+ years in security engineering

Tools

SPIFFE/SPIRE

PKI & certificate management

Sigstore/Cosign

Kyverno

OPA

SBOM tooling

Job description

EY is seeking an AI Security Engineer to own EY’s Agentic AI platform security end to end. You will address threat modeling, sandboxed execution, and supply-chain integrity across cloud, on‑prem, and air-gapped environments.

You will lead red‑team exercises, policy‑as‑code enforcement, and client engagements with CISOs and regulators, ensuring defense-in-depth and audit-ready evidence. This role is remote across the United States.