Skip to content

Open nowPosted 8 days ago

AI Security Engineer

thales374 open roles

Where
Zaventem_EXC
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAI Security Engineerthales · Zaventem_EXC
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on thales's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market. thales postings stay open a median of 11 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.3%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: posted 8 days ago

thales median: 11 days open

The posting

Les entreprises et les gouvernements comptent sur Thales pour apporter de la confiance aux milliards d’interactions numériques qu’ils établissent avec les utilisateurs. L’Activité Mondiale Identité & Sécurité Numériques (DIS) fournit des technologies et services (des logiciels sécurisés en passant par la biométrie ou encore le cryptage), qui permettent aux entreprises ainsi qu’aux gouvernements de vérifier des identités, et de protéger les données afin qu’elles restent sûres.

AI Security Engineer

The AI Security Engineer is a technical and consulting role focused on the design, development and production deployment of AI systems, both for client engagements and to support the organization's internal needs. The role complements the AI Security Advisor: where the latter drives strategy, governance and advisory, the AI Security Engineer focuses on execution. They build, ship and maintain the solutions, with clients and internally, embedding security best practices from design onward.

The role combines a strong appetite for software engineering with curiosity for applied AI (LLMs, agents, RAG, MLOps) and the associated security challenges. A significant share of the activity is dedicated to client engagements: requirements gathering, design, prototyping, development, support to production rollout, and knowledge transfer. In parallel, the AI Security Engineer contributes to the organization's strategic internal initiatives (AI-enabled business tools, agentic automations for security, transverse RAG platforms), which also serve as a learning ground and as a basis for capitalizing on client engagements.

Direct report: AI Security Advisor / Senior Management

Tasks and Responsibilities

Client engagements and consulting

  • Deliver on client projects that require software engineering and the secure integration of AI components, with a level of autonomy adapted to the profile and to the engagement context.
  • Take part in scoping workshops with clients: understanding the business need, translating it into a technical architecture, identifying security and compliance constraints.
  • Design, prototype and develop the solutions delivered to clients: LLM integrations, RAG, agents, AI-driven automations, within the framework set by the AI Security Advisor.
  • Support the client through to production: industrialization, secure deployment pipelines, knowledge transfer to the client's internal teams.
  • Contribute to pre-sales activities: demos, PoCs, technical estimates, technical sections of RFP responses, alongside the sales teams and the AI Security Advisor.
  • Represent the organization in front of clients with a strong level of communication, pedagogy and consulting posture.
  • Capitalize after each engagement: lessons learned, reusable components, contributions to internal frameworks and standards.

Development and industrialization of internal AI tools

  • AI-enabled business tools : actively contribute to the development and evolution of internal solutions (for example in CRM, due diligence or decision support domains), embedding software quality and security best practices.
  • Document processing pipelines : contribute to the development and maintenance of automated document processing tools, ensuring pipeline robustness and the protection of the data being handled.
  • Agentic automations for security : develop agentic components for cybersecurity operations (notably SOC use cases), in close collaboration with the Cyber Defense teams and the AI Security Advisor.
  • Design and develop internal tools based on RAG, agents and AI-driven automations to support the needs of IT, HR and other departments.
  • Industrialize PoCs and PoVs produced by the AI team into robust, maintainable solutions.
  • Document, test and maintain the delivered solutions over time.

Embedding security in AI development

  • Apply secure coding and application security best practices in the code produced, both internally and for clients.
  • Secure AI deployment pipelines: CI/CD, secrets management, dependency control, API and cloud integrations.
  • Implement defense mechanisms suited to AI systems: guardrails, input and output filtering, monitoring, control over the tools accessible to agents.
  • Contribute, with the AI Security Advisor, to the operational implementation of reference frameworks (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF) within projects.
  • Take part in threat modeling and code review activities on AI components, in collaboration with the AI Security Advisor.

Watch and capitalization

  • Keep up to date on tools, frameworks and best practices for AI development and the associated application security.
  • Develop reusable libraries, scripts and components to accelerate future projects.
  • Contribute to internal knowledge sharing: lessons learned, demos, documentation.
  • Capitalize on project insights to feed the standards and frameworks driven by the AI Security Advisor.

Collaboration and communication

  • Work closely with the AI Security Advisor to ensure alignment between strategy and execution.
  • Collaborate with delivery and R&D teams.
  • Communicate effectively with technical stakeholders (dev, DevSecOps, MLOps) as well as non-technical ones (business, management).
  • Contribute to coordination with Thales global initiatives around AI.

Skills

Expected technical foundation

  • Solid software engineering fundamentals, ideally in Python, with care for clean, tested and maintainable code.
  • Curiosity and first hands-on experience with modern AI architectures: LLMs, RAG, agent frameworks, API-based integrations.
  • Awareness of application security topics: understanding of common vulnerabilities (OWASP Top 10) and secure coding principles.
  • Foundations on at least one cloud platform (AWS, Azure or GCP) and on DevOps practices (CI/CD, containerization, infrastructure as code).

Topics to grow into within the role

  • Design and industrialization of production-grade AI solutions: advanced RAG, agents, orchestration, observability.
  • AI-specific risks and the associated defense techniques: prompt injection, data poisoning, guardrails, agent sandboxing, tool access control.
  • Reference frameworks and standards in the field: OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, AI Act.
  • MLOps practices and the securing of AI deployment pipelines.

Mindset and personal qualities

  • Genuine passion for AI and cybersecurity, with visible personal practice: side projects, open source contributions, experimentation, blogging, active watch.
  • Strong interpersonal skills and a willingness to work directly with clients: listening, rephrasing, simplifying, defending a position on technical grounds.
  • Curiosity, autonomy and the ability to learn fast in a field that evolves every week.
  • Strong delivery mindset: finish what you start, ship things that work, and iterate.
  • Ability to communicate simply, in writing and orally, in French and English, in a professional context and in front of varied audiences (technical and business).
  • Eagerness to work in close collaboration with the AI Security Advisor and to grow on AI, security and consulting topics.

Candidate profile

  • The position is open to all experience levels, from junior to senior. The scope of engagements, the level of autonomy and the client-facing posture will be calibrated accordingly.
  • The common foundation expected is a software engineering background combined with a real appetite for cybersecurity, AI and consulting topics.
  • For more junior profiles, demonstrated passion, fast learning ability and the appetite for project-based work matter more than formal experience. For more senior profiles, prior exposure to client environments and to AI or application security projects will be valued.
  • Personal projects related to AI, software engineering or application security are a strong plus regardless of experience level.

Required Languages/

  • French or Dutch native
  • English is a plus

Valued certifications

No certification is required upon hiring. A skills development plan will be set up and may include the GIAC certifications dedicated to AI security, which directly map to the scope of the role:

  • GIAC AI Platform Security (GAIPS) : securing GenAI applications and LLM development pipelines (integrations, APIs, MLOps, agents).
  • GIAC AI Security Automation Engineer (GASAE) : automation and AI applied to offensive, defensive and cloud security operations, particularly relevant to agentic automations in cybersecurity.
  • GIAC Offensive AI Analyst (GOAA) : offensive techniques related to AI (deepfakes, guardrail bypass, AI-assisted malicious code generation), useful to inform defensive practices.

Other cybersecurity or cloud certifications (OSCP, OSCE, AWS/Azure/GCP certifications, etc.) will also be valued.

Thales, entreprise Handi-Engagée, reconnait tous les talents. La diversité est notre meilleur atout. Postulez et rejoignez nous !

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against thales's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on thales's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    thales's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.