Senior AI Security Engineer – Platform & Threat Modeling

EY; Secaucus (NJ); Remote; USD 151,000 - 251,000; Full time

Job summary

EY is seeking an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end, from silicon-level attestation to prompt-injection defense. EY seeks a principal security engineer with deep cloud-native security, AI threat modeling, and the ability to defend engineering outcomes to a client’s CISO or regulator.

This role focuses on defining secure-by-default contracts, sandboxing, and end-to-end supply-chain integrity within highly regulated environments, including tax,

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related technical field.
• 10+ years in security engineering with production ownership.
• Strong cloud-native and Kubernetes security experience.
• Hands-on with workload identity and secrets management.
• Experience securing AI or ML systems in production.
• Threat modelling capabilities with verifiable controls.
• Auditing or regulatory-compliance track record.
• Client-facing or consulting experience with CISOs/regulators.

Responsibilities

• Own the platform threat model across agent autonomy, tool invocation, and multi-tenancy for all deployment targets.
• Define the security engineering and control set for infrastructure, Kubernetes, identity, secure execution, and telemetry.
• Set a secure-by-default contract with hardened templates, Helm charts, sandbox profiles, and network policies.
• Lead defense against agentic threat classes including prompt injection, jailbreaks, and authority abuse.
• Define the agent authority model with delegated scope, consent boundaries, and non-escalation invariants.
• Own the sandboxing standard for agent-generated code: isolation, scope, and exit strategies.
• Secure the model and knowledge supply chain: provenance, SBOM, signing, and verifications.
• Secure agent-to-agent and tool protocols: trust, approvals, and authorization validation.
• Lead AI red-teaming and adversarial testing to validate guardrails and boundaries.
• Own supply-chain integrity from artifact signing to CVE management and license governance.
• Oversee admission and runtime policy across Kyverno and OPA to enforce non-compliant workloads.
• Define hardening baselines for Kubernetes and infrastructure, including network default-deny.
• Ensure tenant isolation across compute, network, storage, and telemetry with cross-tenant testing.
• Serve as the security authority in client engagements and regulatory reviews.

Skills

Cloud-native security

AI threat models

Zero-trust

Policy-as-code

Software supply-chain security

Offensive security

Threat modelling

Communication

Risk management

Education

Bachelor’s or Master’s degree in Computer Science, Security, or related technical field

Job description

EY is seeking an AI Security Engineer to own the security posture of EY's Agentic AI platform end to end, from silicon-level attestation to prompt-injection defense. EY seeks a principal security engineer with deep cloud-native security, AI threat modeling, and the ability to defend engineering outcomes to a client’s CISO or regulator.

This role focuses on defining secure-by-default contracts, sandboxing, and end-to-end supply-chain integrity within highly regulated environments, including tax,