Senior AI Security Engineer – Platform Threat Defense

EY; Memphis (TN); Remote; USD 126,000 - 261,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Flexible vacation policy

Job summary

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end, spanning from silicon-level attestation to policy enforcement and audit-grade evidence.

The role requires deep cloud-native security experience, AI threat modelling, and the ability to defend complex, regulated environments across tax, financial services, and risk. Remote work across the US is possible.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field.
• 10+ years of security engineering, security engineering, or offensive security with hands-on ownership.
• Demonstrable depth in cloud-native and Kubernetes security: admission control, network policy, workload isolation, and runtime security.
• Hands-on experience with workload identity and secrets management (SPIFFE/SPIRE, Vault/OpenBao or equivalents) and with PKI and certificate lifecycle.
• Practical experience securing AI or ML systems in production, including prompt injection, tool abuse, excessive agency, and data supply-chain risk.
• Threat modelling capability applied to real systems, with evidence controls were built and verified.
• Track record delivering under compliance, security, or regulatory constraint with audit-grade evidence.
• Experience defining ownership boundaries and control contracts with platform, data, runtime, and delivery teams.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and multi-tenancy throughout deployment phases.
• Define the security engineering and control set for each platform layer: infra, Kubernetes, identity, secure execution, and telemetry.
• Set the secure-by-default contract so agent templates and policies ship with correct controls.
• Lead defense against agentic threat classes including prompt injection, jailbreaks, and authority escalation.
• Define the agent authority model with delegated scope, depth limits, and consent boundaries.
• Own the sandboxing security standard for agent-generated code execution and isolation.
• Secure the model and knowledge supply chain: provenance, SBOM, and attestation.
• Secure agent-to-agent and tool protocols with trust, validation, and authorization.
• Lead AI red teaming and adversarial testing for guardrails and boundaries.
• Own supply-chain integrity: artifact signing, verification, SBOM, and build integrity.
• Own admission and runtime policy via Kyverno and OPA, enforcing guardrails.

Skills

Platform security engineering

AI threat modelling

Zero-trust fundamentals

Policy-as-code (OPA/Kyverno)

Supply-chain security

Threat hunting and red-teaming

Communication with clients/regulators

Cloud-native security at scale

Education

Bachelor’s or Master’s degree in Computer Science, Security, or related field

Tools

SPIFFE/SPIRE

PKI and certificate lifecycle

Sigstore/Cosign

Notary/SLSA provenance

Vault/OpenBB0 or equivalents

Kyverno

OPA

Job description

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end, spanning from silicon-level attestation to policy enforcement and audit-grade evidence.

The role requires deep cloud-native security experience, AI threat modelling, and the ability to defend complex, regulated environments across tax, financial services, and risk. Remote work across the US is possible.