AI Security Engineer

HCL Technologies Limited; Bengaluru; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

HCL Technologies Limited seeks a Vision AI Security Engineer to secure the VisionX platform, AI/ML models, video analytics pipelines, and GenAI features across the end-to-end AI ecosystem.

The role combines expertise in cybersecurity, secure software engineering, and AI security to identify, assess, and mitigate vulnerabilities, adversarial threats, and data leakage risks in cloud-native, microservices-based solutions.

Qualifications

• 8+ years of experience in AI/security engineering or related field.
• Strong knowledge of application security, secure SDLC, threat modeling, vulnerability management, and security-by-design principles.
• Hands-on experience with security assessment tools: OWASP ZAP, Burp Suite, SonarQube, SAST/DAST/SCA.
• Deep understanding of authentication/authorization (OAuth2, JWT, SSO, RBAC) and access control mechanisms.

Skills

AI security

Threat modeling

Secure SDLC

Vulnerability management

Security automation

Python scripting

Incident response

Security governance

Cloud security

Tools

OWASP ZAP

Burp Suite

SonarQube

SAST

DAST

SCA

OAuth2

JWT

SSO

RBAC

Job description

We are seeking a Vision AI Security Engineer to ensure the security, resilience, and trustworthiness of the VisionX platform, including computer vision solutions, AI/ML models, video analytics pipelines, and GenAI-powered capabilities.

The ideal candidate will combine expertise in cybersecurity, AI security, and secure software engineering to identify, assess, and mitigate vulnerabilities, adversarial threats, model risks, and misuse scenarios across the end-to-end AI ecosystem.

Skills

• We are looking for a AI Security Engineer with minimum 8 years of experience.
• Strong knowledge of application security, secure SDLC, threat modeling, vulnerability management, and security-by-design principles.
• Hands-on experience with application security assessment tools such as OWASP ZAP, Burp Suite, SonarQube, SAST, DAST, SCA, and other enterprise security platforms.
• Deep understanding of OWASP Top 10, API Security Top 10, authentication and authorization frameworks (OAuth2, JWT, SSO, RBAC), and access control mechanisms.
• Proven experience securing web applications, APIs, cloud-native solutions, microservices, and enterprise integrations using modern security frameworks and best practices.
• Proficiency in Python scripting and security automation to enable scalable security validation, monitoring, and DevSecOps implementations.
• Strong understanding of AI/ML architectures, model lifecycles, data pipelines, and security considerations across AI-powered systems.
• Experience securing GenAI and LLM-based applications, including protection against prompt injection, jailbreak attacks, unsafe outputs, model abuse, and data leakage risks.
• Knowledge of RAG security principles, including grounding integrity, retrieval controls, source trust validation, vector database security, and prevention of unauthorized data exposure.
• Understanding of AI-specific threat models, including adversarial attacks, data poisoning, model evasion, model theft, and privacy-related risks.
• Experience assessing the security of computer vision and video analytics solutions, including image/video ingestion pipelines, inference services, edge AI deployments, and connected devices.
• Familiarity with cloud security concepts across Azure, AWS, or GCP, including IAM, network security, secrets management, container security, and workload protection.
• Strong knowledge of security monitoring, incident response, risk assessment, compliance, and governance frameworks relevant to AI and enterprise applications.