Security AI Operations Engineer

Location:

BELFAST ARNOTT HOUSE, United Kingdom

Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.

Role

Title:

Security AI Operations Engineer

Organization: Value Added Services / Security Operations

Location: Belfast, Northern Ireland (Hybrid)

Role Overview The Security AI Operations Specialist bridges automated AI systems and human security operations. This role is responsible for the day-to-day supervision, quality control, and execution of AI-assisted security workflows.

Working alongside the Security Automation & AI Engineering team, the Specialist manages "Human-in-the-Loop" (HITL) triage queues, maintains and updates knowledge bases feeding generative models, audits AI outputs for accuracy, and ensures prioritized investigation tasks are routed seamlessly to front-line security analysts and consultants.

Key Responsibilities

• AI Workflow Supervision & Human-in-the-Loop (HITL) Routing
• Review and validate low-confidence alert enrichments, threat summaries, and triage recommendations generated by AI agents.
• Assign, dispatch, and track complex security investigations, policy changes, and incident response playbooks to appropriate Tier 2/3 analysts and consultants.
• Serve as the operational escalation point when automated pipelines encounter exceptions, edge cases, or platform integration errors.
• Knowledge Base & Prompt Lifecycle Management
• Curate, clean, and organize internal runbooks, standard operating procedures (SOPs), threat intelligence, and product documentation stored in Amazon Bedrock Knowledge Bases and Amazon Open Search Service.
• Audit AI retrieval quality and document gaps in knowledge coverage that lead to model hallucinations or poor responses.
• Perform routine prompt adjustments and template maintenance, submitting structured enhancement tickets to engineering when underlying code changes are required.
• Quality Assurance & Performance Auditing
• Regularly audit AI-generated outputs (incident summaries, triage context, customer reports) against human analyst benchmarks to ensure high fidelity and operational safety.
• Identify recurring false positives or hallucination patterns, collaborating directly with automation engineers to refine model guardrails and prompt evaluation datasets.
• Track and report on operational KPIs, including Mean Time to Respond (MTTR), task assignment velocity, and analyst AI adoption.
• Team Enablement & Operational Feedback
• Train security analysts and services teams on prompt best practices, effective use of internal AI copilots, and feedback submission workflows.
• Gather front-line feedback and feature requests from security practitioners to help shape the automation engineering roadmap.
• Sales
• Partner with the Sales Engineering team to develop and deliver Value-Added Services (VAS) proof-of-values (POVs), clearly demonstrating the business value and impact of these services.
• Collaborate with Account teams to accelerate time-to-value for Thales solutions among non-VAS customers, strengthening customer adoption, retention, and renewal outcomes.

Required Qualifications

• Education:
  
  Bachelor’s degree, in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field. Master’s degree is a plus!
• Experience:
  
  3–5+ years in a Security Operations Center (SOC), Managed Security Services (MSSP), IT Service Management (ITSM), or technical workflow coordination role, including 2+ years working with AI/Gen…