Cloud AI Security Engineer

Thales Defense & Security • Clarksburg, WV

20h • $88,920 - $120,000 • Hybrid

About The Position

We are seeking a hands-on Cloud Security Engineer with practical experience in Azure and/or AWS who can help build and operate core cloud security controls while integrating security into AI/ML workflows. This foundational role will partner across teams to deliver measurable improvements in identity, network segmentation, data protection, logging/monitoring, and compliance for DoD and government workloads. This role is located in our Clarksburg, MD office and will report to the Director of Cybersecurity.

Requirements

• U.S. Citizenship required.
• Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.
• Bachelor’s degree in a technical field or equivalent experience.
• 3 - 6 years in cybersecurity with 2+ years focused on Azure and/or AWS security in enterprise or government environments.
• Hands-on experience with IAM, network security, encryption, logging/monitoring, and CSPM/CWPP tools.
• Experience with infrastructure-as-code and policy-as-code; scripting for automation (PowerShell/Python/Bash).
• Working knowledge of compliance frameworks (FedRAMP, CMMC, NIST SP 800-53, DoD Cloud SRG).
• Strong communication and collaboration skills; ability to document and drive cross-team remediation.
• Ability to participate in a rotating on‑call schedule to support continuous service and respond to priority issues as needed

Nice To Haves

• Preferred Certifications: CISSP, CCSP, CISM, Azure Security Engineer, Security+.
• Experience integrating security into MLOps, LLMs, or generative AI applications.
• Container/Kubernetes security experience; service mesh and runtime protections.
• Experience with Azure Stack Edge family of devices.
• Experience with DoD networks, especially classified and operational networks.
• Understanding of enterprise networking concepts, especially Virtual Private Networks (VPNs), tunneling, QoS, and cloud connectivity solutions (e.g. Azure Express Route).

Responsibilities

• Establish baseline cloud security controls (IAM/Entra ID, network segmentation, encryption, logging) with dashboards and runbooks.
• Deploy or tune CSPM/CWPP tooling; reduce misconfigurations and critical findings by agreed targets.
• Deliver audit-ready evidence for FedRAMP/CMMC/NIST SP 800-53 control families in scope.
• Stand up detections for cloud and AI-specific threats in Microsoft Sentinel or equivalent SIEM; document response playbooks.
• Design and operate security controls across Azure/AWS: IAM/Entra ID, VNet/VPC controls, NSGs/Security Groups, WAF, private endpoints/PrivateLink.
• Implement Zero Trust/least privilege patterns; establish guardrails. (Azure Policy, AWS SCPs, OPA/Gatekeeper).
• Deploy and maintain CSPM/CWPP tooling and integrate with SIEM (Microsoft Sentinel / Splunk).
• Protect AI/ML pipelines pragmatically: secure training data, model repos, and inference endpoints; apply access controls and logging.
• Conduct threat modeling and risk assessments; document findings with prioritized remediation plans and partner follow-through.
• Support compliance for FedRAMP, CMMC, NIST SP 800-53; produce artifacts and evidence for audits.
• Maintain runbooks, diagrams, and SOPs; drive continuous improvement through metrics.

Benefits

• Competitive Salary
• Yearly Incentive Compensation Plan
• Medical insurance for self and eligible family members
• Generous 401(k) program- up to 7% company contribution and 100% immediate vesting
• Tuition Reimbursement
• Paid wellness, vacation, and holiday leave
• Paid maternity, paternity, and parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree