Cloud AI Security Engineer - Hybrid, FedRAMP Ready

Thales Defense & Security, Inc.; Clarksburg (MD); Hybrid; USD 89,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Tuition Reimbursement

Paid time off

Hybrid schedule

Job summary

Thales Defense & Security, Inc. is seeking a hands-on Cloud AI Security Engineer to build and operate core cloud security controls for DoD and government workloads.

You will work on IAM, network segmentation, data protection, logging, and compliance across Azure and AWS, coordinating with multiple teams from Clarksburg, MD. You will implement Zero Trust patterns, CSPM/CWPP tooling, and detections in SIEMs like Microsoft Sentinel or Splunk, while enabling secure AI/ML workflows and governance.

Qualifications

• Bachelor's degree in a technical field or equivalent experience.
• 3-6 years in cybersecurity with 2+ years focused on Azure and/or AWS security in enterprise or government environments.
• Hands-on experience with IAM, network security, encryption, logging/monitoring, and CSPM/CWPP tools.
• Experience with infrastructure-as-code and policy-as-code; scripting for automation (PowerShell/Python/Bash).

Responsibilities

• Establish baseline cloud security controls (IAM/Entra ID, network segmentation, encryption, logging) with dashboards and runbooks.
• Deploy or tune CSPM/CWPP tooling; reduce misconfigurations and critical findings by agreed targets.
• Deliver audit-ready evidence for FedRAMP/CMMC/NIST SP 800-53 control families in scope.
• Stand up detections for cloud and AI-specific threats in Microsoft Sentinel or equivalent SIEM; document response playbooks.
• Design and operate security controls across Azure/AWS: IAM/Entra ID, VNet/VPC controls, NSGs/Security Groups, WAF, private endpoints/PrivateLink.
• Implement Zero Trust/least privilege patterns; establish guardrails. (Azure Policy, AWS SCPs, OPA/Gatekeeper).
• Deploy and maintain CSPM/CWPP tooling and integrate with SIEM (Microsoft Sentinel / Splunk).
• Protect AI/ML pipelines pragmatically: secure training data, model repos, and inference endpoints; apply access controls and logging.
• Conduct threat modeling and risk assessments; document findings with prioritized remediation plans and partner follow-through.
• Support compliance for FedRAMP, CMMC, NIST SP 800-53; produce artifacts and evidence for audits.
• Maintain runbooks, diagrams, and SOPs; drive continuous improvement through metrics.

Skills

IAM

Network security

Encryption

Logging/monitoring

CSPM/CWPP

Policy as code

Scripting (PowerShell/Python/Bash)

Education

Bachelor's degree in a technical field

Tools

Azure

AWS

Job description

Thales Defense & Security, Inc. is seeking a hands-on Cloud AI Security Engineer to build and operate core cloud security controls for DoD and government workloads.

You will work on IAM, network segmentation, data protection, logging, and compliance across Azure and AWS, coordinating with multiple teams from Clarksburg, MD. You will implement Zero Trust patterns, CSPM/CWPP tooling, and detections in SIEMs like Microsoft Sentinel or Splunk, while enabling secure AI/ML workflows and governance.