Senior AI Security Engineer — Remote

EY; Houston (TX); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Total Rewards package

Job summary

EY is seeking a security-focused product/AI safety engineer to embed security across the lifecycle, turning threats into practical controls. You’ll work with product and engineering teams, prove controls under adversarial conditions, and replace one-off reviews with reusable patterns and measurable coverage.

The Challenger program builds shared technology and guardrails; you’ll contribute reusable tools, threat models, and guided responses to ensure safe, scalable AI deployments across the firm.

Qualifications

• 5+ years of relevant experience.
• Substantial experience in product, application, cloud, platform, or detection security, including hands‑on ownership of production controls.
• Threat modeling: ability to assess complex systems and translate attack paths into practical engineering measures.
• Production security: experience securing modern applications, cloud environments, identities, data, networks, and software delivery pipelines.
• AI systems knowledge: working understanding of generative and agentic AI, including retrieval, model access, tool use, evaluation, and runtime behavior.
• Hands‑on automation: experience building or extending security tests, controls, telemetry, reference implementations, or adversarial assessments.
• Response experience: evidence of supporting vulnerability or incident response and translating lessons into stronger technical controls.
• Cross‑functional delivery: record of partnering with engineers and risk functions to improve security while respecting user value and delivery constraints.
• Travel and On‑site requirements: up to 50% travel and hybrid office flexibility.

Responsibilities

• Set the security direction with reusable AI security patterns, control objectives, reference architectures, and threat models.
• Join builders early to identify credible attack paths and shape controls.
• Design scoped authority for identity, access, isolation, approvals, and recovery.
• Protect sensitive information across the data lifecycle with confidentiality and provenance.
• Secure the delivery path by integrating automated security tests, policy gates, and trusted artifacts.
• Test adversarially with focused red-team exercises and convert findings into repeatable tests.
• Build runtime protection using evidence and behavioral signals to detect abuse and exfiltration.
• Strengthen response with clear evidence and containment options for incidents.
• Advise on residual risk with concise technical recommendations for stakeholders.
• Build shared capability by creating reference implementations and coaching engineers.

Skills

Security engineering

AI threat modeling

Control engineering

Red teaming

Automation tests

Product judgment

Education

Bachelor’s Degree in a relevant field

Job description

EY is seeking a security-focused product/AI safety engineer to embed security across the lifecycle, turning threats into practical controls. You’ll work with product and engineering teams, prove controls under adversarial conditions, and replace one-off reviews with reusable patterns and measurable coverage.

The Challenger program builds shared technology and guardrails; you’ll contribute reusable tools, threat models, and guided responses to ensure safe, scalable AI deployments across the firm.