Senior AI & Security Automation Engineer

Description

The company builds identity management and data protection solutions that support digital security for banks, governments and other organizations. More than 30,000 organizations use its products and services to verify identities, control access to digital services, analyze large volumes of data and encrypt information.

The Security Services and Operations teams need intelligent automation, agentic workflows and cloud-native integrations to remove repetitive operational work. Tasks such as log routing, alert enrichment, incident triage and policy audits will become automated pipelines, search architectures and AI copilots that help service delivery scale.

This senior role sits between software engineering, applied AI and enterprise cybersecurity.

Responsibilities

• Design and deploy multi-step AI agents and reasoning workflows on Amazon Bedrock and LLM orchestration frameworks that handle alert triage, log summaries and root-cause analysis for incidents.
• Build, tune and maintain Retrieval-Augmented Generation pipelines over internal security runbooks, threat intelligence feeds and product documentation, using Amazon OpenSearch Service and Bedrock Knowledge Bases.
• Set up evaluation frameworks, Bedrock Guardrails and deterministic fallback layers that limit hallucinations, defend against prompt injection and keep operations safe.
• Create and maintain event-driven pipelines and custom API connectors that link SIEMs, cloud log sources, WAFs, API security platforms and ticketing systems.
• Build and improve search and ingestion pipelines that index security telemetry and event logs in Amazon OpenSearch Service for fast queries, anomaly detection and vector retrieval.
• Write orchestration playbooks that automate routine customer onboarding, configuration drift audits and security policy rollouts.
• Build detection-as-code and configuration-as-code pipelines in Git with CI/CD practices.
• Turn automation engines and search queries into CLI tools, ChatOps bots for Slack or Teams, and internal web portals for security consultants and analysts.
• Work directly with delivery teams to find operational bottlenecks and build scalable programmatic fixes.
• Track pipeline health, Bedrock token use, OpenSearch cluster performance and indexing latency, API rate limits and compute costs across all deployed tools.
• Work with the Sales Engineering team to develop and deliver Value-Added Services proof-of-values that show the business value of these services.
• Work with account teams to shorten time-to-value for non-VAS customers, supporting adoption, retention and renewals.

Requirements

• A bachelor's degree in computer science, engineering, artificial intelligence, machine learning, data science or a closely related technical field. A master's degree is a plus.
• 9+ years of hands-on experience in software engineering, security automation, DevSecOps or applied machine learning engineering, including 4+ years in software engineering, AI/ML, data, cloud or enterprise technology, and 2+ years designing, building and delivering AI/ML or GenAI solutions at enterprise scale.
• Hands-on work building generative AI applications, agents and RAG pipelines on Amazon Bedrock, including Bedrock APIs, Knowledge Bases, Guardrails and foundation models such as Anthropic Claude.
• Proven use of Amazon OpenSearch Service, or OpenSearch or Elasticsearch, for log analytics, complex queries, index management and vector or k-NN search in RAG systems.
• Proven experience building automation with AWS Lambda, Amazon EventBridge, AWS Step Functions and Amazon ECS/Fargate.
• Hands-on skill configuring and automating ingestion and export with Amazon CloudWatch Logs, VPC Flow Logs and AWS CloudTrail.
• Strong knowledge of least-privilege AWS IAM policies, role assumption through sts:AssumeRole, and credential management with AWS Secrets Manager and KMS.
• Working knowledge of asynchronous task routing and ingestion with Amazon API Gateway, Amazon SQS, Amazon SNS and Amazon S3.
• Advanced Python (FastAPI, asyncio, Pydantic, Boto3, OpenSearch-py) and Bash scripting. Go is a plus.
• Proven production work with LLM orchestration frameworks such as LangChain, LangGraph or LlamaIndex, plus semantic search architectures and structured prompt engineering.
• Deep knowledge of RESTful APIs, webhooks, event triggers, JSON and YAML processing, and OAuth2, API key and mTLS authentication.
• Hands-on Docker containerization and automated CI/CD with GitHub Actions or GitLab CI.
• Solid understanding of WAF, API security, log correlation, incident lifecycle and MITRE ATT&CK.
• You must have the legal right to work in the US for any employer on your hire date. The role carries no visa sponsorship, and the company will not take on sponsorship of an employment visa at any point, now or later.
• Preferred: Infrastructure as Code skill provisioning AWS resources, including OpenSearch domains and Bedrock integrations, with Terraform or AWS CDK.
• Preferred: Experience with Amazon SageMaker, streaming telemetry through Amazon Kinesis Data Streams or Firehose, or distributed querying with Amazon Athena.
• Preferred: Working knowledge of AWS WAF, AWS Network Firewall, AWS Security Hub and Amazon GuardDuty.
• Preferred: Past experience building automation or delivery tooling at an enterprise cybersecurity software vendor, a SOC or a managed security service provider.
• Preferred certifications: AWS Certified Security; AWS Certified Solutions Architect (Associate or Professional); AWS Certified AI Practitioner or Machine Learning Specialty; GIAC AI Security Automation Engineer (GASAE) or an equivalent.

Conditions

The role is hybrid and based in Austin, Texas.

Schedule: Monday to Friday, 9-hour shifts that include 8 hours of work and a 1 hour lunch.

Occasional paid weekend on-call duty, about once every 2 months.

The reference total target compensation range, covering base salary plus the variable target, is 127,068.20 to 252,872.90 USD per year. Placement within the range depends on career path, skills, performance, internal equity and budget. Additional compensation may be offered depending on circumstances.

Internal candidates should contact HR through the internal system for details.

The company is an equal opportunity employer that welcomes applicants regardless of disability or veteran status.

Benefits

• Elective health, dental and vision coverage, FSA or HSA, voluntary life and AD&D, whole group life with long-term care, critical illness, hospital indemnity, accident insurance, legal plan, identity theft protection and pet insurance.
• Retirement savings plan available after 30 days, with a company contribution and matching, and no vesting period.
• Company-paid holidays and paid time off.
• Company-provided life insurance, AD&D, disability coverage, employee assistance plan and well-being program.
• Full-time employees working 30 or more hours per week and their eligible dependents receive the extensive benefits program.