AI-Native Security Engineer - Senior
Ernst and Young4 days ago
Base Salary
$107k - $201k/yr
Responsibilities
- Own reusable AI security patterns, control objectives, reference architectures, and threat models.
- Partner with product and engineering teams early to identify attack paths and design practical controls.
- Create security patterns for identity, access, isolation, approvals, recovery, and tool-using AI authority.
- Protect sensitive information across the data lifecycle, including confidentiality, integrity, provenance, permitted use, and monitored access.
- Integrate automated security tests, policy gates, trusted artifacts, traceable changes, and safe rollback into delivery workflows.
- Conduct focused red-team exercises and convert findings into repeatable tests and stronger platform patterns.
- Build runtime protections using evidence and behavioral signals to detect abnormal actions, privilege misuse, exfiltration attempts, and degrading controls.
- Support vulnerability triage and incident response with evidence, containment options, recovery actions, and lessons learned.
- Advise product, security, evaluation, and risk leaders on residual technical risk without owning approval or risk-acceptance decisions.
- Create reference implementations, coach engineers, and develop reusable security capabilities.
Requirements
- At least 5 years of relevant experience.
- Bachelor’s degree in a relevant field.
- Substantial hands-on experience owning production controls across product, application, cloud, platform, or detection security.
- Demonstrated threat-modeling ability and experience translating attack paths into practical engineering measures.
- Experience securing modern applications, cloud environments, identities, data, networks, and software delivery pipelines.
- Working knowledge of generative and agentic AI, including retrieval, model access, tool use, evaluation, and runtime behavior.
- Experience building or extending security tests, controls, telemetry, reference implementations, or adversarial assessments.
- Experience supporting vulnerability or incident response and translating lessons into stronger technical controls.
- Experience partnering with engineers and risk functions while balancing security, user value, and delivery constraints.
- Preferred experience securing tool-using agents, AI gateways, model-serving platforms, retrieval systems, or high-autonomy applications.
- Preferred experience in regulated, safety-relevant, or multi-region environments with formal evidence and response requirements.
- Preferred detection engineering, supplier and supply-chain risk, AI security research, responsible disclosure, open-source tooling, privacy technology, standards, or professional community experience.
Benefits
- Base salary ranges from $106,900 to $176,500 in most US locations, with higher ranges for specified metropolitan areas and California offices.
- Medical and dental coverage, pension, and 401(k) plans.
- Paid time off options including flexible vacation, EY holidays, winter and summer breaks, personal/family care, and other leaves of absence.
- Anywhere-in-country location, up to 50% travel, and flexibility to work in the office in a hybrid capacity.
- Professional growth, personal fulfillment, and an inclusive culture.
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.