Cybersecurity Engineer / AI Cloud Security Engineer

Qualizeal; Dallas (TX); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Airlines seeks an AI Cloud Security Engineer to implement and operationalize security controls for GenAI workloads hosted on AWS, with emphasis on Bedrock Guardrails, AIDR, and frontier model security.

The role bridges architecture and hands-on automation, aligning with NIST AI RMF, MITRE ATLAS, and OWASP Top 10 for LLM applications within CI/CD pipelines and cloud security operating models.

Qualifications

• Experience configuring AWS Bedrock Guardrails and model access policies.
• Experience with Terraform or CloudFormation IaC.
• Knowledge of CrowdStrike Falcon/AIDR or equivalent.
• Understanding of GenAI security, RAG architectures, prompts mitigation.
• Experience with CI/CD security gates and policy-as-code.
• Experience with CloudWatch and observability tooling.

Responsibilities

• Design, configure, and maintain security controls for GenAI and Agentic AI in AWS.
• Deploy Bedrock Guardrails, including content moderation and model access controls.
• Implement CrowdStrike AIDR and runtime protection for foundation models.
• Develop adversarial security tests for LLMs and AI agents.
• Embed guardrails-as-code into deployment pipelines using Terraform or CloudFormation.
• Configure logging and alerts to integrate with enterprise SOC.
• Conduct threat modeling for RAG architectures and AI tool integrations.

Skills

AWS Bedrock Security

AWS IaC (Terraform/CFN)

Runtime Protection (EDR/AIDR)

GenAI/LLM Security

AI Vulnerability Testing

CI/CD & DevSecOps

Cloud Logging/Observability

Education

Bachelor's degree in Cybersecurity or related field

Tools

Terraform

CloudFormation

AWS IAM

OpenTelemetry

Job description

Job Title: Cybersecurity Engineer

Role: AI Cloud Security Engineer

Dallas, TX (Hybrid)

Position Overview

The AI Cloud Security Engineer will implement and operationalize enterprise security capabilities across Airlines' cloud-hosted AI platforms. This role is primarily responsible for establishing preventive, detective, and governance controls for Generative AI and Agentic AI workloads hosted on AWS, with an emphasis on AWS Bedrock Security Guardrails , CrowdStrike AIDR for Agents, and frontier model security.

The ideal candidate bridges architecture design and hands-on automation, integrating frameworks such as NIST AI RMF , OWASP Top 10 for LLM Applications , and MITRE ATLAS into enterprise CI/CD pipelines and cloud security operating models.

Key Responsibilities

• AI Platform Security & Guardrails: Design, configure, and maintain security controls for GenAI and Agentic AI solutions in AWS. Deploy AWS Bedrock Guardrails, including content filtering, sensitive information redaction (PII), token protection, and model access controls.
• Runtime Protection & Detection: Implement and operationalize CrowdStrike AIDR (AI Threat Detection and Response) and runtime protection for foundation models, agents, and cloud workloads.
• Security Testing & Red Teaming: Develop and execute adversarial security tests targeting LLMs and AI agents (e.g., prompt injection, jailbreaking, tool abuse, and data exfiltration).
• Security as Code & CI/CD Integration: Partner with platform and engineering teams to deploy guardrails-as-code using Terraform or CloudFormation, embedding automated AI security checks into deployment pipelines.
• Observability & SIEM Integration: Configure logging, telemetry, and monitoring across AI services (using CloudWatch, OpenTelemetry, etc.) to pipe alerts into enterprise SOC platforms.
• Architecture & Governance Alignment: Conduct threat modeling and security reviews for RAG architectures, agent orchestration frameworks, and tool integrations aligned with NIST AI RMF and MITRE ATLAS.

Required Skills & Experience (Prioritized)

1. AWS AI & Bedrock Security (5 years Cloud, 1 2 years AI Security): Direct hands-on experience configuring AWS Bedrock Guardrails, model access policies, content moderation filters, and foundation model protections.
2. AWS Cloud Engineering & IaC: Strong proficiency with AWS core security (IAM, SCPs, AWS Organizations) and Infrastructure as Code (Terraform or CloudFormation).
3. Runtime Protection & EDR/AIDR: Proven experience deploying and managing CrowdStrike Falcon , CrowdStrike AIDR, or equivalent cloud runtime detection platforms.
4. GenAI / LLM / Agentic AI Security: Deep technical understanding of RAG architectures, AI agent frameworks, prompt injection mitigations, output validation, and token abuse prevention.
5. AI Vulnerability Testing: Practical experience conducting security assessments and penetration tests specific to LLMs, tool integrations, and data leakage scenarios.
6. CI/CD & DevSecOps: Experience integrating automated security gates and policy-as-code into continuous integration/continuous deployment pipelines.
7. Cloud Logging & Observability: Expertise in aggregating AI telemetry via Amazon CloudWatch, SIEM tools, or OpenTelemetry.

Qualifications & Education

• Education: Bachelor s degree in Cybersecurity, Computer Science, Information Systems, Data Science, Engineering, or equivalent practical experience. Advanced degree preferred.
• Basic Requirements: Must be at least 18 years old with legal authorization to work in the United States without sponsorship (Immigration Reform Act of 1986).

Preferred Certifications

• AWS Certified Security Specialty
• AWS Certified AI Practitioner or AWS Cloud Practitioner
• CrowdStrike Falcon Platform Certifications (e.g., CCFA, CCFR)
• Industry Security Certifications: CISSP, CCSP, or GIAC Cloud Security (GCSA/GPCS)

Professional & Interpersonal Competencies

• Proven ability to translate complex AI cybersecurity risks into actionable roadmaps for both engineering teams and senior leadership.
• Collaborative mindset with experience working in Agile, cross-functional delivery teams.
• Strong critical-thinking skills to analyze emerging AI threat vectors and quickly adapt defense controls.