Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
EY

Senior Manager – Application Security, AI Engineering

EY

. Define and execute Application Security and AI Security strategy, architecture standards, and transformation roadmaps .

Posted 11/10/2026full-timeDallas • Texas • United StatesSenior💰 $154,700 - $353,500 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Application Security and AI Security, with a strong focus on secure software development, threat modeling, and risk management. Proficient in leading transformation initiatives and embedding security practices across engineering and product teams.

Highest-signal resume keywords
Application Security StrategyDevSecOps LeadershipThreat Modeling ExpertiseSecure Software Development LifecycleAI Security Governance

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Secure Application ArchitectureVulnerability ManagementAttack-Path AnalysisCloud SecurityAI/GenAI TechnologiesSASTDASTSoftware Composition AnalysisAPI SecurityContainer Security
Soft Skills
LeadershipExecutive CommunicationClient-Facing SkillsStakeholder Management
Tools & Technologies
STRIDEPASTAMITRE ATT&CKGitHub CopilotAzureAWSGoogle CloudKubernetesTerraformBurp Suite
Certifications & Qualifications
CISSPCSSLPCCSPCISMGWAPTCKS
Industry Keywords
Secure-by-Design PrinciplesAI Threat ModelingRed TeamingPrompt-Injection TestingResponsible AI Governance

Tech Stack

Tools & technologies
AWSAzureCloudCyber SecurityKubernetesMicroservicesTerraform

About the role

Key responsibilities & impact
  • Define and execute Application Security and AI Security strategy, architecture standards, and transformation roadmaps
  • Lead Secure Software Development Lifecycle and DevSecOps initiatives across product and engineering organizations
  • Govern AI coding assistants and autonomous coding agents across the SSDLC, including sandboxing, credential scoping, tool-access boundaries, and review standards
  • Embed automated and AI-assisted security review in IDEs and pull requests
  • Address risks from AI-generated and prompt-driven development, including code provenance, hallucinated or typosquatted dependencies, and prompt injection
  • Establish and scale threat modeling programs using STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, attack trees, and abuse cases
  • Conduct security architecture reviews and risk assessments for applications, APIs, microservices, cloud services, and AI solutions
  • Design and oversee SAST, DAST, Software Composition Analysis, API Security, Container Security, and Cloud Security capabilities
  • Architect secure AI and GenAI solutions, including LLM applications, copilots, RAG platforms, and agentic AI systems
  • Develop controls for AI agents, autonomous workflows, model access, prompt security, data protection, guardrails, and responsible AI governance
  • Partner with engineering, product, cloud, data, and cyber teams
  • Mentor application security architects, AI engineers, DevSecOps professionals, and security consultants

Requirements

What you’ll need
  • 10+ years of experience in application security, software engineering, cloud security, AI engineering, or cybersecurity
  • Deep expertise in secure application architecture, threat modeling, vulnerability management, attack-path analysis, and Secure-by-Design principles
  • Experience leading enterprise-scale Application Security, DevSecOps, or secure engineering transformation programs
  • Strong understanding of cloud-native architectures, APIs, microservices, containers, and AI/GenAI technologies
  • Current, hands-on experience building software with agentic development tools such as Cursor, Claude Code, and GitHub Copilot, including how to configure and secure them for enterprise use
  • Excellent leadership, executive communication, client-facing, and stakeholder management capabilities
  • Preferred skills and technologies include STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, Semgrep, CodeQL, Snyk, Burp Suite, OWASP Top 10, Azure, AWS, Google Cloud, Kubernetes, Terraform, GitHub Actions, GitLab CI, Azure DevOps, OPA, Kyverno, Azure AI Foundry, OpenAI, Anthropic, Vertex AI, Amazon Bedrock, LangGraph, OpenAI Agents SDK, Claude Agent SDK, Model Context Protocol, AI threat modeling, red teaming, prompt-injection testing, RAG security, agent security, model risk, guardrails, and responsible AI governance
  • Preferred certifications include CISSP, CSSLP, CCSP, CISM, GWAPT, CKS, and relevant Microsoft, AWS, Google Cloud, AI Security, or Responsible AI certifications

Benefits

Comp & perks
  • Medical and dental coverage
  • Pension plan
  • 401(k) plan
  • Flexible vacation policy
  • EY Paid Holidays
  • Winter/Summer breaks
  • Personal/Family Care leave
  • Other leaves of absence
  • Professional growth opportunities
  • Inclusive culture
  • Reasonable accommodation for qualified individuals with disabilities