E

Ernst & Young

Global professional services: consulting, assurance, tax

Agile-TC-CS-Cyber Architecture-OT and Engineering-Cloud Security-Senior

Security Engineering & Architecture +1Updated on Nov 14
Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

  • Strong understanding of machine learning and generative AI concepts, including large language models, embeddings, and pipelines.
  • Hands-on experience in application security, API security, and cloud security.
  • Knowledge of AI attack surfaces across prompt, model, and data layers.
  • Ability to simulate real-world attack scenarios using an adversarial mindset.
  • Understanding of the OWASP Top 10 and large language model vulnerabilities.
  • Working knowledge of the MITRE ATT&CK framework.
  • Three to six years of experience in cybersecurity, application security, or cloud security.
  • Hands-on exposure to AI/generative AI security concepts or implementations.
  • Experience in vulnerability assessment, red teaming, or threat modelling.
  • Working knowledge of cloud platforms such as Azure or AWS.

Responsibilities

  • Lead AI red teaming execution, including prompt injection, jailbreak, and data exfiltration scenarios.
  • Perform AI threat modelling across model, data, and application layers.
  • Design and implement large language model guardrails and retrieval-augmented generation security controls.
  • Conduct machine learning pipeline and model lifecycle security reviews.
  • Secure APIs and AI inference endpoints in cloud environments.
  • Support incident response for AI-specific threats and exploitation attempts.
  • Integrate security controls into AI/machine learning pipelines and DevSecOps workflows.
  • Collaborate with security operations center teams on AI workload detection and monitoring use cases.

Desired Qualifications

  • Hands-on experience with AI security tools such as Garak, PyRIT, or LLM Guard.
  • Exposure to adversarial machine learning tools such as ART or Foolbox.
  • Experience integrating security into MLOps or DevSecOps pipelines.
  • Certifications in cloud or security domains, such as AZ-500 or CEH.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs