Senior AI & Security Automation Engineer

Location: Austin, United States of America

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Position Summary

Austin, Hybrid

Thales is looking for a Senior AI & Security Automation Engineer who designs, builds, and maintains intelligent automation systems, agentic workflows,

and cloud-native integrations to eliminate operational toil across our Security Services and Operations teams.

Sitting at the intersection of modern software engineering, applied artificial intelligence, and enterprise cybersecurity, this role transforms manual, repetitive workflows-such as log routing, alert enrichment, incident triage, and policy audits-into resilient, automated pipelines, search architectures, and AI copilots that scale service delivery.

Key Areas of Responsibility

1.Applied AI & Agentic Workflow Development

• Architect and deploy multi-step AI agents and autonomous reasoning workflows using Amazon Bedrock and LLM orchestration frameworks to automate alert triage, log summarization, and incident root-cause analysis.
• Build, optimize, and maintain Retrieval-Augmented Generation (RAG) pipelines over internal security runbooks, threat intelligence feeds, and product documentation using Amazon OpenSearch Service and Bedrock Knowledge Bases.
• Implement robust evaluation frameworks, Bedrock Guardrails, and deterministic fallback layers to prevent hallucinations, secure against prompt injections, and ensure operational safety.

2.Security Automation, Search & Integration Engineering

• Develop and maintain event-driven automation pipelines and custom API connectors linking SIEMs, cloud log sources, WAFs, API security platforms, and ticketing systems.
• Design, build, and optimize search and ingestion pipelines to index security telemetry and event logs into Amazon OpenSearch Service for fast querying, anomaly detection, and vector retrieval.
• Build orchestration playbooks to automate routine customer onboarding tasks, configuration drift audits, and security policy deployments.
• Implement detection-as-code and configuration-as-code pipelines using Git version control and CI/CD best practices.

3. Internal Tooling & Service Enablement

• Package automation engines and search queries into user-friendly CLI tools, ChatOps bots (Slack/Teams), and internal web portals for security consultants and analysts.
• Partner directly with delivery teams to identify operational bottlenecks and engineer scalable programmatic solutions.
• Monitor pipeline health, Bedrock token consumption, OpenSearch cluster performance/indexing latency, API rate limits, and compute costs across all deployed tools.

4. Sales

• Partner with the Sales Engineering team to develop and deliver Value-Added Services (VAS) proof-of-values (POVs), clearly demonstrating the business value and impact of these services.
• Collaborate with Account teams to accelerate time-to-value for Thales solutions among non-VAS customers, strengthening customer adoption, retention, and renewal outcomes.

Minimum Qualifications

• Education: Bachelor's degree in Computer Science, Engineering, Artificial Intelligence, Machine Learning, Data Science, or a related technical field; Master's degree is a plus.
• Experience: 9+ years of hands-on experience in software engineering, security automation, DevSecOps, or applied machine learning engineering. 4+ years of experience in software engineering, AI/ML, data, cloud, or enterprise technology, including 2+ years designing, developing and delivering AI/ML or GenAI solutions at enterprise scale.
• AWS Cloud & AI Engineering:

o Amazon Bedrock: Hands-on experience developing generative AI applications, agents, and RAG pipelines using Amazon Bedrock (including Bedrock APIs, Knowledge Bases, Guardrails, and Foundation Models such as Anthropic Claude).

o OpenSearch & Vector Search: Demonstrated experience with Amazon OpenSearch Service (or OpenSearch / Elasticsearch) for log analytics, complex querying, index management, and vector database / k-NN search integrations for RAG.

o Serverless & Event-Driven Workflows: Proven experience building automation using AWS Lambda, Amazon EventBridge, AWS Step Functions, and Amazon ECS/Fargate.

o Log Routing & Telemetry: Hands-on proficiency configuring and automating ingestion/export pipelines with Amazon CloudWatch Logs, VPC Flow Logs, and AWS CloudTrail.

o AWS IAM & Security: Deep understanding of least-privilege AWS IAM policies, role assumption (sts:AssumeRole), and credential management via AWS Secrets Manager and KMS.

o Cloud Integration: Working knowledge of asynchronous task routing and ingestion using Amazon API Gateway, Amazon SQS, Amazon SNS, and Amazon S3.

• Programming & Scripting: Advanced proficiency in Python (FastAPI, asyncio, Pydantic, Boto3, OpenSearch-py) and shell scripting (Bash); familiarity with Go is a plus.
• Applied AI Engineering: Proven experience building production workflows using LLM orchestration frameworks (LangChain, LangGraph, or LlamaIndex), semantic search architectures, and structured prompt engineering.
• API & System Integration: Deep working knowledge of RESTful APIs, webhooks, event triggers, JSON/YAML processing, and authentication mechanisms (OAuth2, API keys, mTLS).
• Containers & CI/CD: Hands-on experience with Docker containerization and automated CI/CD pipelines (GitHub Actions, GitLab CI).
• Cybersecurity Fundamentals: Strong understanding of core security domains (WAF, API security, log correlation, incident lifecycle, MITRE ATT&CK).

Applicants must be legally authorized to work in the United States for any employer at the time of hire. This position is not eligible for visa sponsorship or for assuming sponsorship of an employment visa now or in the future.

Preferred Qualifications

• Infrastructure as Code (IaC): Proficiency in provisioning scalable AWS resources (including OpenSearch domains and Bedrock integrations) using Terraform or AWS Cloud Development Kit (CDK).
• Advanced Data & ML Pipelines: Experience with Amazon SageMaker, streaming telemetry via Amazon Kinesis Data Streams / Firehose, or distributed querying with Amazon Athena.
• Native AWS Security Tooling: Working knowledge of AWS WAF, AWS Network Firewall, AWS Security Hub, and Amazon GuardDuty.
• Domain Background: Prior experience building automation or delivery tooling within an enterprise cybersecurity software vendor, SOC, or Managed Security Service Provider (MSSP).
• Industry Certifications:

o AWS Certified Security

o AWS Certified Solutions Architect (Associate or Professional)

o AWS Certified AI Practitioner / Machine Learning Specialty o GIAC AI Security Automation Engineer (GASAE) or equivalent.

Special Position Requirement

Schedule: Monday to Friday 9hrs shift (8hrs work + 1 hour lunch included) and occasional paid weekend on-calls (Once every 2 months)

Why Join Us?

Say HI and learn more about working at Thales click here.

#LI- Hybrid

#LI-TI1

This position will require successfully completing a post-offer background check. Qualified candidates with [a] criminal history will be considered and are not automatically disqualified, consistent with federal law, state law, and local ordinances.

Thales champions inclusion and we believe diversity strengthens the fabric of our culture. Thales is an Equal Opportunity Employer, including disability/veterans.

If you need an accommodation or assistance in order to apply for a position with Thales, please contact us at talentacquisition@us.thalesgroup.com.

The reference Total Target Compensation (TTC) market range for this position, inclusive of annual base salary and the variable compensation target, is between

Total Target Cash (TTC) 127,068.20 - 252,872.90 USD Annual

This reflects how companies in a similar industry and geographic region generally pay for similar jobs. This range helps the Company make pay decisions as one data point among many. Where a position falls within this range is also dependent on other factors including - but not limited to - the employee's career path history, competencies, skills and performance, as well as the company's annual salary budget, the customer's program requirements, and the company's internal equity. Thales may offer additional benefits and other compensation, depending on circumstances not related to an applicant's status protected by local, state, or federal law.

(For Internal candidate, if you need more information, please raise HR request through MyThales)

Thales provides an extensive benefits program for all full-time employees working 30 or more hours per week and their eligible dependents, including the following:

• Elective Health, Dental, Vision, FSA/HSA, Voluntary Life and AD&D, Whole Group Life w/LTC, Critical Illness, Hospital Indemnity, Accident Insurance, Legal Plan, Identity Theft, and Pet Insurance
• Retirement Savings Plan after 30 days of employment with a company contribution and a match, and with no vesting period
• Company paid holidays and Paid Time Off
• Company provided Life Insurance, AD&D, Disability, Employee Assistance Plan, and Well-being Program