{"id":1655302,"url":"https://alion.io/job/thales-group-security-ai-operations-engineer","title":"Security AI Operations Engineer","company":{"id":143,"name":"Thales Group","domain":"thalesgroup.com","url":"https://alion.io/company/thales","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":36,"ghost_share":0.028,"stale_share":0.056,"repost_share":0.028,"time_to_fill_p50_days":47,"computed_at":"2026-10-17T05:46:00Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Belfast, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Hallucination","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OpenSearch","optional":false},{"name":"Supervision","optional":false},{"name":"Amazon CloudWatch","optional":true},{"name":"AWS","optional":true},{"name":"ElasticSearch","optional":true},{"name":"ITSM","optional":true},{"name":"Jira","optional":true},{"name":"Machine Learning","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"PagerDuty","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true},{"name":"SLI/SLO/SLA","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-01T00:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-15T21:12:55Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Location: BELFAST ARNOTT HOUSE, United KingdomThales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.\nRole Title: Security AI Operations Engineer\nOrganization: Value Added Services / Security Operations\nLocation: Belfast, Northern Ireland (Hybrid)\nRole Overview\nThe Security AI Operations Specialist bridges automated AI systems and human security operations. This role is responsible for the day-to-day supervision, quality control, and execution of AI-assisted security workflows.\nWorking alongside the Security Automation & AI Engineering team, the Specialist manages \"Human-in-the-Loop\" (HITL) triage queues, maintains and updates knowledge bases feeding generative models, audits AI outputs for accuracy, and ensures prioritized investigation tasks are routed seamlessly to front-line security analysts and consultants.\nKey Responsibilities\n1. AI Workflow Supervision & Human-in-the-Loop (HITL) Routing\nReview and validate low-confidence alert enrichments, threat summaries, and triage recommendations generated by AI agents.\nAssign, dispatch, and track complex security investigations, policy changes, and incident response playbooks to appropriate Tier 2/3 analysts and consultants.\nServe as the operational escalation point when automated pipelines encounter exceptions, edge cases, or platform integration errors.\n2. Knowledge Base & Prompt Lifecycle Management\nCurate, clean, and organize internal runbooks, standard operating procedures (SOPs), threat intelligence, and product documentation stored in Amazon Bedrock Knowledge Bases and Amazon OpenSearch Service.\nAudit AI retrieval quality and document gaps in knowledge coverage that lead to model hallucinations or poor responses.\nPerform routine prompt adjustments and template maintenance, submitting structured enhancement tickets to engineering when underlying code changes are required.\n3. Quality Assurance & Performance Auditing\nRegularly audit AI-generated outputs (incident summaries, triage context, customer reports) against human analyst benchmarks to ensure high fidelity and operational safety.\nIdentify recurring false positives or hallucination patterns, collaborating directly with automation engineers to refine model guardrails and prompt evaluation datasets.\nTrack and report on operational KPIs, including Mean Time to Respond (MTTR), task assignment velocity, and analyst AI adoption.\n4. Team Enablement & Operational Feedback\nTrain security analysts and services teams on prompt best practices, effective use of internal AI copilots, and feedback submission workflows.\nGather front-line feedback and feature requests from security practitioners to help shape the automation engineering roadmap.\n5. Sales\nPartner with the Sales Engineering team to develop and deliver Value-Added Services (VAS) proof-of-values (POVs), clearly demonstrating the business value and impact of these services.\nCollaborate with Account teams to accelerate time-to-value for Thales solutions among non-VAS customers, strengthening customer adoption, retention, and renewal outcomes.\nRequired Qualifications\nEducation: Bachelor’s degree, in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field. Master’s degree is a plus!\n Experience: 3-5+ years in a Security Operations Center (SOC), Managed Security Services (MSSP), IT Service Management (ITSM), or technical workflow coordination role, including 2+ years working with AI/Gen AI-enabled tools or workflows.\n Cybersecurity Foundation: Working knowledge of security operations, threat lifecycle, alert triage, WAF, API security, and common security frameworks (e.g., MITRE ATT&CK, NIST).\n AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms).\nCloud & Search Interface Familiarity: Working comfort navigating the AWS Management Console (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics).\nCommunication & Documentation: Strong technical writing skills with experience authoring security runbooks, SOPs, and structured process documentation.\nPreferred Qualifications\nData & Query Skills: Basic scripting ability in Python or experience writing search queries (OpenSearch / Elasticsearch queries, SQL, or Lucene).\nWorkflow Automation: Experience configuring no-code/low-code workflow tools, webhook triggers, or ticketing automation rules.\nIndustry Certifications:AWS Certified Security - Specialty or AWS Certified Solutions Architect - Associate/Professional\nAWS Certified AI Practitioner or Machine Learning - Specialty\n CISSP (Certified Information Systems Security Professional)\nGIAC Certifications: GCIH (Incident Handler), GCIA (Intrusion Analyst), GCDA (Detection Analyst), or GASAE (AI Security Automation Engineer)\n\nSuccess Metrics (KPIs)\nQueue & Dispatch SLA - 95%+ of HITL exceptions and high-priority AI-flagged alerts assigned within defined SLAs.\nKnowledge Base Freshness - 100% of operational runbooks reviewed and indexed on a recurring monthly/quarterly schedule.\nOutput Quality & Accuracy - Maintain >95% accuracy on AI-assisted triage outputs through continuous auditing and feedback loops.\nTeam Adoption & Satisfaction - High analyst satisfaction and engagement scores with AI-enabled workflows and copilots.\nApplicants must be legally authorized to work in the UK at the time of hire. This position is not eligible for visa sponsorship or for assuming sponsorship of an employment visa now or in the future.\nAt Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. Read more about our benefits here.\nWe are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring. Discover more about our programmes, employee networks, wellbeing policies, and inclusive features here.\nIf this role isn’t quite right for you, we encourage you to join our talent community where your details will be shared with our recruitment teams for other potential opportunities. Join the Talent Community here.\nJoin Thales in the UK - Innovate with us and shape the future!","description_format":"text","description_chars":6764,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual leave","Health insurance"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Ireland","iso":"IE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Satellite Communications","Satellite Manufacturing","Electronic Warfare","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-14T02:00:51Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.846,"p_room":1,"age_days":16,"expected_fill_days":47,"reasons":["conf:32","velocity","win:early","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/thales-group-security-ai-operations-engineer","json_url":"https://alion.io/job/thales-group-security-ai-operations-engineer.json","meta":{"generated_at":"2026-10-17T07:48:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10571,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":143},"rest":"https://alion.io/mcp/rest/get_company?id=143"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthales-group-security-ai-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthales-group-security-ai-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthales-group-security-ai-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thales-group-security-ai-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthales-group-security-ai-operations-engineer"}]}