Senior AI & Security Automation Engineer

Thales • Austin, TX

1d • $127,068 - $252,873 • Hybrid

About The Position

Thales is looking for a Senior AI & Security Automation Engineer who designs, builds, and maintains intelligent automation systems, agentic workflows, and cloud-native integrations to eliminate operational toil across our Security Services and Operations teams. Sitting at the intersection of modern software engineering, applied artificial intelligence, and enterprise cybersecurity, this role transforms manual, repetitive workflows—such as log routing, alert enrichment, incident triage, and policy audits—into resilient, automated pipelines, search architectures, and AI copilots that scale service delivery.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Artificial Intelligence, Machine Learning, Data Science, or a related technical field; Master’s degree is a plus.
• 9+ years of hands-on experience in software engineering, security automation, DevSecOps, or applied machine learning engineering.
• 4+ years of experience in software engineering, AI/ML, data, cloud, or enterprise technology, including 2+ years designing, developing and delivering AI/ML or GenAI solutions at enterprise scale.
• Amazon Bedrock: Hands-on experience developing generative AI applications, agents, and RAG pipelines using Amazon Bedrock (including Bedrock APIs, Knowledge Bases, Guardrails, and Foundation Models such as Anthropic Claude).
• OpenSearch & Vector Search: Demonstrated experience with Amazon OpenSearch Service (or OpenSearch / Elasticsearch) for log analytics, complex querying, index management, and vector database / k-NN search integrations for RAG.
• Serverless & Event-Driven Workflows: Proven experience building automation using AWS Lambda, Amazon EventBridge, AWS Step Functions, and Amazon ECS/Fargate.
• Log Routing & Telemetry: Hands-on proficiency configuring and automating ingestion/export pipelines with Amazon CloudWatch Logs, VPC Flow Logs, and AWS CloudTrail.
• AWS IAM & Security: Deep understanding of least-privilege AWS IAM policies, role assumption (sts:AssumeRole), and credential management via AWS Secrets Manager and KMS.
• Cloud Integration: Working knowledge of asynchronous task routing and ingestion using Amazon API Gateway, Amazon SQS, Amazon SNS, and Amazon S3.
• Advanced proficiency in Python (FastAPI, asyncio, Pydantic, Boto3, OpenSearch-py) and shell scripting (Bash); familiarity with Go is a plus.
• Proven experience building production workflows using LLM orchestration frameworks (LangChain, LangGraph, or LlamaIndex), semantic search architectures, and structured prompt engineering.
• Deep working knowledge of RESTful APIs, webhooks, event triggers, JSON/YAML processing, and authentication mechanisms (OAuth2, API keys, mTLS).
• Hands-on experience with Docker containerization and automated CI/CD pipelines (GitHub Actions, GitLab CI).
• Strong understanding of core security domains (WAF, API security, log correlation, incident lifecycle, MITRE ATT&CK).

Nice To Haves

• Infrastructure as Code (IaC): Proficiency in provisioning scalable AWS resources (including OpenSearch domains and Bedrock integrations) using Terraform or AWS Cloud Development Kit (CDK).
• Advanced Data & ML Pipelines: Experience with Amazon SageMaker, streaming telemetry via Amazon Kinesis Data Streams / Firehose, or distributed querying with Amazon Athena.
• Native AWS Security Tooling: Working knowledge of AWS WAF, AWS Network Firewall, AWS Security Hub, and Amazon GuardDuty.
• Domain Background: Prior experience building automation or delivery tooling within an enterprise cybersecurity software vendor, SOC, or Managed Security Service Provider (MSSP).
• AWS Certified Security
• AWS Certified Solutions Architect (Associate or Professional)
• AWS Certified AI Practitioner / Machine Learning Specialty
• GIAC AI Security Automation Engineer (GASAE) or equivalent.

Responsibilities

• Architect and deploy multi-step AI agents and autonomous reasoning workflows using Amazon Bedrock and LLM orchestration frameworks to automate alert triage, log summarization, and incident root-cause analysis.
• Build, optimize, and maintain Retrieval-Augmented Generation (RAG) pipelines over internal security runbooks, threat intelligence feeds, and product documentation using Amazon OpenSearch Service and Bedrock Knowledge Bases.
• Implement robust evaluation frameworks, Bedrock Guardrails, and deterministic fallback layers to prevent hallucinations, secure against prompt injections, and ensure operational safety.
• Develop and maintain event-driven automation pipelines and custom API connectors linking SIEMs, cloud log sources, WAFs, API security platforms, and ticketing systems.
• Design, build, and optimize search and ingestion pipelines to index security telemetry and event logs into Amazon OpenSearch Service for fast querying, anomaly detection, and vector retrieval.
• Build orchestration playbooks to automate routine customer onboarding tasks, configuration drift audits, and security policy deployments.
• Implement detection-as-code and configuration-as-code pipelines using Git version control and CI/CD best practices.
• Package automation engines and search queries into user-friendly CLI tools, ChatOps bots (Slack/Teams), and internal web portals for security consultants and analysts.
• Partner directly with delivery teams to identify operational bottlenecks and engineer scalable programmatic solutions.
• Monitor pipeline health, Bedrock token consumption, OpenSearch cluster performance/indexing latency, API rate limits, and compute costs across all deployed tools.
• Partner with the Sales Engineering team to develop and deliver Value-Added Services (VAS) proof-of-values (POVs), clearly demonstrating the business value and impact of these services.
• Collaborate with Account teams to accelerate time-to-value for Thales solutions among non-VAS customers, strengthening customer adoption, retention, and renewal outcomes.

Benefits

• Elective Health, Dental, Vision, FSA/HSA, Voluntary Life and AD&D, Whole Group Life w/LTC, Critical Illness, Hospital Indemnity, Accident Insurance, Legal Plan, Identity Theft, and Pet Insurance
• Retirement Savings Plan after 30 days of employment with a company contribution and a match, and with no vesting period
• Company paid holidays and Paid Time Off
• Company provided Life Insurance, AD&D, Disability, Employee Assistance Plan, and Well-being Program

What This Job Offers

• Job Type: Full-time
• Career Level: Senior