Senior AI Security Engineer — Platform Threat Defense

EY; Phoenix (AZ); Remote; USD 150,000 - 260,000; Full time

Job summary

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end, spanning cloud-native and platform security, with emphasis on threat modelling and policy-as-code.

You will lead AI red teaming, defense against prompt injection, and supply-chain integrity across regulated environments, working with clients' CISOs and auditors. EY offers a global, diverse team and growth opportunities.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field or demonstrably equivalent depth.
• 10+ years in security engineering with hands-on ownership and delivery impact.
• Deep cloud-native and Kubernetes security with production-grade controls.
• Practical experience securing AI/ML systems including prompt injection risks.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and multi-tenant deployment.
• Define security engineering and control sets for all platform layers, from boot chain to telemetry.
• Establish secure-by-default contracts and policy-as-code controls.
• Lead AI red teaming, adversarial testing, and guardrail validation before deployment.
• Ensure supply-chain integrity, SBOM, and provenance across the delivery lifecycle.
• Define Kubernetes and infrastructure hardening baselines and tenant isolation assurances.
• Engage with clients’ CISOs and regulators, delivering assurance artifacts for regulated environments.
• Drive detection, response, and incident playbooks for agentic platforms.

Skills

Cloud-native security

AI threat models

Zero-trust

Workload identity

Supply-chain security

Adversarial testing

Policy-as-code

Threat modelling

Education

Bachelor’s/Master’s degree

Tools

SPIFFE/SPIRE

PKI

Sigstore/Cosign

Notation

Job description

EY seeks an AI Security Engineer to own the security posture of EY’s Agentic AI platform end to end, spanning cloud-native and platform security, with emphasis on threat modelling and policy-as-code.

You will lead AI red teaming, defense against prompt injection, and supply-chain integrity across regulated environments, working with clients' CISOs and auditors. EY offers a global, diverse team and growth opportunities.