Lead AI Security Engineer - Senior Manager
Ernst and Young2 months ago
Base Salary
$126k - $262k/yr
Responsibilities
- Own and continuously update the end-to-end threat model for the agentic AI platform.
- Define security engineering controls across infrastructure, boot chains, Kubernetes, identity, secrets, execution, networking, data, delivery, and telemetry.
- Establish secure-by-default controls for agent templates, Helm charts, sandbox profiles, and network policies.
- Defend against prompt injection, jailbreaks, excessive agency, authority escalation, tool abuse, context poisoning, and data exfiltration threats.
- Define delegated-authority, consent, scope, and non-escalation controls for agents and tool calls.
- Own sandbox security standards and escape testing for agent-generated code execution.
- Secure model, knowledge, software, and data supply chains through provenance, signing, SBOMs, attestation, and vulnerability management.
- Secure MCP and A2A agent-to-agent and tool protocols, including discovery, registration, schema validation, and authorization.
- Lead AI red teaming and adversarial testing of guardrails, sandboxes, and authority boundaries.
- Own policy-as-code, admission control, runtime enforcement, Kubernetes hardening, tenant isolation, and infrastructure security baselines.
- Serve as the security authority in client engagements and produce audit-grade assurance evidence.
- Drive detection engineering, security telemetry, alerting, incident response playbooks, and post-incident reviews.
Requirements
- Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field, or demonstrably equivalent depth.
- 10+ years of hands-on experience in security engineering or offensive security with production ownership.
- Deep production experience in cloud-native and Kubernetes security, including admission control, network policy, workload isolation, and runtime security.
- Experience with workload identity, secrets management, PKI, and certificate lifecycle management, including SPIFFE/SPIRE and Vault/OpenBao or equivalents.
- Practical experience securing AI or ML systems in production and familiarity with LLM and agentic attack surfaces.
- Experience applying threat modeling to real systems and building and verifying the resulting controls.
- Track record delivering security or compliance work under regulatory constraints with audit-grade evidence.
- Experience defining ownership boundaries and control contracts across platform, data, runtime, and delivery teams.
- Preferred experience with software supply-chain security, artifact signing, SBOMs, provenance, vulnerability management, and delivery pipelines.
- Preferred experience with OPA, Kyverno, or equivalent policy and authorization engines.
- Preferred experience leading AI red teams or adversarial testing against LLM and agentic systems.
- Familiarity with confidential computing, hardware attestation, secure boot, and measured boot.
- Working knowledge of OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, and the EU AI Act.
- Experience with LLM guardrail and defense tools such as NeMo Guardrails, LLM Guard, LlamaFirewall, or Guardrails AI.
- Experience securing multi-tenant platforms across cloud, on-premises, edge, client-managed, and air-gapped environments.
- Detection engineering, incident response, client-facing consulting, and regulated-industry experience are preferred.
- Relevant certifications such as CISSP, OSCP, GIAC, or cloud-security certifications are preferred.
Benefits
- Medical and dental coverage.
- Pension and 401(k) plans.
- Paid time off, EY paid holidays, winter and summer breaks, personal and family care leave, and other leave options.
- Flexible vacation policy.
- Position is available anywhere in the country, with salary varying by US office location.
- EY accepts applications on an ongoing basis.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.