Job description:

5 8+ years of experience in Application Security, Penetration Testing, or Offensive Security Strong knowledge of web application and API security testing Experience with security testing tools such as Burp Suite, OWASP ZAP, Metasploit, and Nmap Understanding of AI/ML architectures including LLMs, ML pipelines, and model deployment environmentsDetail JD Perform penetration testing of AI-powered applications and systems, including LLM-based applications, AI APIs, and ML pipelines Identify vulnerabilities such as prompt injection, data leakage, insecure model outputs, model extraction, and adversarial inputs Conduct red-teaming exercises for generative AI systems to simulate abuse scenarios Evaluate AI systems for model integrity, training data risks, and inference security weaknesses Collaborate with AI/ML engineering teams to ensure security best practices are embedded in model development and deployment Develop attack methodologies and frameworks for AI security testing Assess security risks associated with AI model hosting platforms, APIs, and inference services Provide detailed vulnerability reports and remediation guidance to engineering teams Integrate AI security testing into the Secure SDLC process Research emerging threats in AI/ML security and adversarial machine learning Work with internal and external teams to enhance AI security posture across HCL Software products