Senior AI & Security Automation Engineer

Location: Austin United States of America

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds people cross borders energy become smarter and much more. More than 30000 organizations already rely on us to verify the identities of people and things grant access to digital services analyze vast quantities of information and encrypt data to make the connected world more secure.

Position Summary

Austin Hybrid

Thales is looking for a Senior AI & Security Automation Engineer who designs builds and maintains intelligent automation systems agentic workflows

and cloud-native integrations to eliminate operational toil across our Security Services and Operations teams.

Sitting at the intersection of modern software engineering applied artificial intelligence and enterprise cybersecurity this role transforms manual repetitive workflowssuch as log routing alert enrichment incident triage and policy auditsinto resilient automated pipelines search architectures and AI copilots that scale service delivery.

Key Areas of Responsibility

AI & Agentic Workflow Development

Architect and deploy multi-step AI agents and autonomous reasoning workflows using Amazon Bedrock and LLM orchestration frameworks to automate alert triage log summarization and incident root-cause analysis.

Build optimize and maintain Retrieval-Augmented Generation (RAG) pipelines over internal security runbooks threat intelligence feeds and product documentation using Amazon OpenSearch Service and Bedrock Knowledge Bases.

Implement robust evaluation frameworks Bedrock Guardrails and deterministic fallback layers to prevent hallucinations secure against prompt injections and ensure operational safety.

Automation Search & Integration Engineering

Develop and maintain event-driven automation pipelines and custom API connectors linking SIEMs cloud log sources WAFs API security platforms and ticketing systems.

Design build and optimize search and ingestion pipelines to index security telemetry and event logs into Amazon OpenSearch Service for fast querying anomaly detection and vector retrieval.

Build orchestration playbooks to automate routine customer onboarding tasks configuration drift audits and security policy deployments.

Implement detection-as-code and configuration-as-code pipelines using Git version control and CI/CD best practices.

3. Internal Tooling & Service Enablement

Package automation engines and search queries into user-friendly CLI tools ChatOps bots (Slack/Teams) and internal web portals for security consultants and analysts.

Partner directly with delivery teams to identify operational bottlenecks and engineer scalable programmatic solutions.

Monitor pipeline health Bedrock token consumption OpenSearch cluster performance/indexing latency API rate limits and compute costs across all deployed tools.

4. Sales

Partner with the Sales Engineering team to develop and deliver Value-Added Services (VAS) proof-of-values (POVs) clearly demonstrating the business value and impact of these services.

Collaborate with Account teams to accelerate time-to-value for Thales solutions among non-VAS customers strengthening customer adoption retention and renewal outcomes.

Minimum Qualifications

Education: Bachelors degree in Computer Science Engineering Artificial Intelligence Machine Learning Data Science or a related technical field; Masters degree is a plus.

Experience: 9 years of hands-on experience in software engineering security automation DevSecOps or applied machine learning engineering. 4 years of experience in software engineering AI/ML data cloud or enterprise technology including 2 years designing developing and delivering AI/ML or GenAI solutions at enterprise scale.

AWS Cloud & AI Engineering:

o Amazon Bedrock: Hands-on experience developing generative AI applications agents and RAG pipelines using Amazon Bedrock (including Bedrock APIs Knowledge Bases Guardrails and Foundation Models such as Anthropic Claude).

o OpenSearch & Vector Search: Demonstrated experience with Amazon OpenSearch Service (or OpenSearch / Elasticsearch) for log analytics complex querying index management and vector database / k-NN search integrations for RAG.

o Serverless & Event-Driven Workflows: Proven experience building automation using AWS Lambda Amazon EventBridge AWS Step Functions and Amazon ECS/Fargate.

o Log Routing & Telemetry: Hands-on proficiency configuring and automating ingestion/export pipelines with Amazon CloudWatch Logs VPC Flow Logs and AWS CloudTrail.

o AWS IAM & Security: Deep understanding of least-privilege AWS IAM policies role assumption (sts:AssumeRole) and credential management via AWS Secrets Manager and KMS.

o Cloud Integration: Working knowledge of asynchronous task routing and ingestion using Amazon API Gateway Amazon SQS Amazon SNS and Amazon S3.

Programming & Scripting: Advanced proficiency in Python (FastAPI asyncio Pydantic Boto3 OpenSearch-py) and shell scripting (Bash); familiarity with Go is a plus.

Applied AI Engineering: Proven experience building production workflows using LLM orchestration frameworks (LangChain LangGraph or LlamaIndex) semantic search architectures and structured prompt engineering.

API & System Integration: Deep working knowledge of RESTful APIs webhooks event triggers JSON/YAML processing and authentication mechanisms (OAuth2 API keys mTLS).

Containers & CI/CD: Hands-on experience with Docker containerization and automated CI/CD pipelines (GitHub Actions GitLab CI).

Cybersecurity Fundamentals: Strong understanding of core security domains (WAF API security log correlation incident lifecycle MITRE ATT&CK).

Applicants must be legally authorized to work in the United States for any employer at the time of hire. This position is not eligible for visa sponsorship or for assuming sponsorship of an employment visa now or in the future.

Preferred Qualifications

Infrastructure as Code (IaC): Proficiency in provisioning scalable AWS resources (including OpenSearch domains and Bedrock integrations) using Terraform or AWS Cloud Development Kit (CDK).

Advanced Data & ML Pipelines: Experience with Amazon SageMaker streaming telemetry via Amazon Kinesis Data Streams / Firehose or distributed querying with Amazon Athena.

Native AWS Security Tooling: Working knowledge of AWS WAF AWS Network Firewall AWS Security Hub and Amazon GuardDuty.

Domain Background: Prior experience building automation or delivery tooling within an enterprise cybersecurity software vendor SOC or Managed Security Service Provider (MSSP).

Industry Certifications:

o AWS Certified Security

o AWS Certified Solutions Architect (Associate or Professional)

o AWS Certified AI Practitioner / Machine Learning Specialty o GIAC AI Security Automation Engineer (GASAE) or equivalent.

Special Position Requirement

Schedule: Monday to Friday 9hrs shift (8hrs work 1 hour lunch included) and occasional paid weekend on-calls (Once every 2 months)

Why Join Us

Say HI and learn more about working at Thalesclick here.

#LI- Hybrid

#LI-TI1

This position will require successfully completing a post-offer background check. Qualified candidates with a criminal history will be considered and are not automatically disqualified consistent with federal law state law and local ordinances.

Thales champions inclusion and we believe diversity strengthens the fabric of our culture. Thales is an Equal Opportunity Employer including disability/veterans.

If you need an accommodation or assistance in order to apply for a position with Thales please contact us at .

The reference Total Target Compensation (TTC) market range for this position inclusive of annual base salary and the variable compensation target is between

Total Target Cash (TTC) 127068.20 - 252872.90 USD Annual

This reflects how companies in a similar industry and geographic region generally pay for similar jobs. This range helps the Company make pay decisions as one data point among many. Where a position falls within this range is also dependent on other factors including but not limited to the employees career path history competencies skills and performance as well as the companys annual salary budget the customers program requirements and the companys internal equity. Thales may offer additional benefits and other compensation depending on circumstances not related to an applicants status protected by local state or federal law.

(For Internal candidate if you need more information please raise HR request through MyThales)

Thales provides an extensive benefits program for all full-time employees working 30 or more hours per week and their eligible dependents including the following:

Elective Health Dental Vision FSA/HSA Voluntary Life and AD&D Whole Group Life w/LTC Critical Illness Hospital Indemnity Accident Insurance Legal Plan Identity Theft and Pet Insurance

Retirement Savings Plan after 30 days of employment with a company contribution and a match and with no vesting period

Company paid holidays and Paid Time Off

Company provided Life Insurance AD&D Disability Employee Assistance Plan and Well-being Program