AI Penetration Testing Engineer

Wipro; Hyderabad, Pune District, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Wipro is seeking an experienced security professional in Hyderabad to perform offensive security and penetration testing across web, API, and cloud environments. The role emphasizes hands-on testing of AI/LLM-based applications, including prompt injection risks and data leakage, with an expectation to understand prompts, embeddings, and tool calling.

The candidate should have strong Python scripting abilities for test automation and tooling, and hold a relevant bachelor's degree or equivalent

Qualifications

• 5+ years of experience in offensive security / penetration testing
• Demonstrated hands-on security testing of AI / LLM-based applications (e.g., prompt injection, data leakage, agent and tool abuse)
• Working knowledge of how LLM applications are built: prompts, context windows, embeddings, RAG, agents, and tool calling
• Strong scripting ability in Python for test automation and tooling
• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field (or equivalent demonstrated experience)

Skills

Offensive security

Penetration testing

Web testing

API testing

Cloud testing

Python scripting

Security testing automation

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Python

Security testing tooling

Job description

Mandatory

• 5+ years of experience in offensive security / penetration testing, with strong web, API, and cloud testing depth.
• Demonstrated hands-on security testing of AI / LLM-based applications (e.g., prompt injection, data leakage, agent and tool abuse).
• Working knowledge of how LLM applications are built: prompts, context windows, embeddings, RAG, agents, and tool calling.
• Strong scripting ability in Python for test automation and tooling.
• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field (or equivalent demonstrated experience).

Desirable

• Experience with adversarial ML techniques and ML frameworks (e.g., PyTorch, TensorFlow, Hugging Face).
• Experience with AI platform services on at least one cloud (Azure AI, AWS Bedrock / SageMaker, Google Vertex AI).
• Red-team, purple-team, or detection-aware testing experience.
• Published research, CVEs, conference talks, or responsible-disclosure contributions in AI security.
• Customer-facing delivery, readout, and solutioning experience.

Knowledge areas and standards

• OWASP Top 10 for LLM Applications and OWASP GenAI Security Project guidance.
• MITRE ATLAS (Adversarial Threat Landscape for AI Systems) and MITRE ATT&CK.
• NIST AI Risk Management Framework (AI RMF) and NIST AI 100-2 (adversarial machine learning taxonomy).
• OWASP Top 10 (Web, API), OWASP WSTG, and penetration testing methodologies (PTES, NIST SP 800-115).
• AI regulation and standards awareness: EU AI Act and ISO/IEC 42001.
• CVSS, CWE, and severity rating approaches adapted to AI-specific findings.
• Responsible AI principles and secure AI development lifecycle practices.