Cloud AI Security Engineer
- Compensation
- Not disclosed
- Location
- CLARKSBURG, MD, US, 20871
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Nice to have
- Certifications: CISSP, CCSP, CISM, Azure Security Engineer, Security+.
- Experience integrating security into MLOps, LLMs, or generative AI applications.
- Container/Kubernetes security experience; service mesh and runtime protections.
- Experience with Azure Stack Edge family of devices.
- Experience with DoD networks, especially classified and operational networks.
- Understanding of enterprise networking concepts, especially Virtual Private Networks (VPNs), tunneling, QoS, and cloud connectivity solutions (e.g. Azure Express Route).
Full description
Thales Defense & Security, Inc. (TDSI) Headquartered in Clarksburg, MD, is a U.S. company that has been serving domestic and international defense Air, Land and Sea domains for 60+ years. With over 1,000 employees, TDSI and its four subsidiaries (Advanced Acoustic Concepts, Digital Receiver Technology, Tampa Microwave, and Trusted Cyber Technologies), supports U.S. Joint Services, special operations forces and multi-national partners with a variety of communication, visualization, signal intelligence/electronic warfare, and sensor/sonar capabilities. TDSI’s key technologies include tactical handheld radios, expeditionary satellite terminals, helmet-mounted displays, optics and target recognition capability, advanced radars, undersea sensing and missile systems. Lives depend on what we do!
Top Benefits (Subject to terms of applicable policies/plans)
- Competitive Salary
- Yearly Incentive Compensation Plan
- Medical insurance for self and eligible family members
- Generous 401(k) program- up to 7% company contribution and 100% immediate vesting
- Tuition Reimbursement
- Paid wellness, vacation, and holiday leave
- Paid maternity, paternity, and parental leave
- 9/80 Work Schedule (every other Friday off)
- Hybrid working environment
We are seeking a hands-on Cloud Security Engineer with practical experience in Azure and/or AWS who can help build and operate core cloud security controls while integrating security into AI/ML workflows. This foundational role will partner across teams to deliver measurable improvements in identity, network segmentation, data protection, logging/monitoring, and compliance for DoD and government workloads. This role is located in our Clarksburg, MD office and will report to the Director of Cybersecurity.
Responsibilities
- Establish baseline cloud security controls (IAM/Entra ID, network segmentation, encryption, logging) with dashboards and runbooks.
- Deploy or tune CSPM/CWPP tooling; reduce misconfigurations and critical findings by agreed targets.
- Deliver audit-ready evidence for FedRAMP/CMMC/NIST SP 800-53 control families in scope.
- Stand up detections for cloud and AI-specific threats in Microsoft Sentinel or equivalent SIEM; document response playbooks.
- Design and operate security controls across Azure/AWS: IAM/Entra ID, VNet/VPC controls, NSGs/Security Groups, WAF, private endpoints/PrivateLink.
- Implement Zero Trust/least privilege patterns; establish guardrails. (Azure Policy, AWS SCPs, OPA/Gatekeeper).