AI Security Specialist

Tata Consultancy Services; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Tata Consultancy Services in Bengaluru seeks an experienced AI security specialist to assess risks across AI/ML and GenAI, conduct security reviews and threat modeling, and design controls for AI models, data, prompts, APIs, and infrastructure.

You will monitor AI environments, investigate incidents, and drive remediation while ensuring compliance with Responsible AI, security standards, and governance frameworks. Collaboration with AI teams and stakeholders is essential.

Qualifications

• 6–8 years in Cyber Security, App Security, Cloud Security, or AI Security.
• Hands-on with GenAI, LLM, AI/ML, and Agentic AI security.
• Strong knowledge in AI threat modeling, AI risk assessment, vulnerability mgmt, AI governance.
• Experience mitigating Prompt Injection, Model Poisoning, Data Leakage, Adversarial Attacks, Jailbreaking, unauthorized access.
• Familiarity with OWASP Top 10, OWASP LLM Top 10, MITRE ATLAS, Responsible AI, secure AI practices.
• Experience with AI platforms such as Azure OpenAI, AWS Bedrock, SageMaker, Vertex AI, OpenAI.
• Understanding of DevSecOps, Secure SDLC, API Security, IAM, Data Protection, Encryption, Cloud Controls.
• Hands-on with Security Monitoring, SIEM, IR, Threat Hunting, Sec Ops.
• Experience in security reviews, architecture assessments, audits, and pen testing.
• Familiarity with ISO 27001, SOC2, NIST AI RMF, GDPR, HIPAA, PCI-DSS.

Responsibilities

• Assess vulnerabilities, risks, and threats across AI/ML and GenAI solutions.
• Perform AI security reviews, threat modeling, risk assessments, and security testing.
• Design and implement security controls for AI models, data, prompts, APIs, and infra.
• Ensure confidentiality, integrity, and availability of AI systems and data.
• Monitor AI environments for security incidents and anomalies.
• Investigate breaches, perform root cause analysis, drive remediation.
• Develop and enforce AI security standards, governance frameworks, and best practices.
• Collaborate with AI engineers, architects, cybersecurity teams, and stakeholders to embed security.
• Evaluate AI-specific risks such as prompt injection, model poisoning, data leakage, adversarial attacks.
• Ensure compliance with enterprise security, privacy, regulatory, and Responsible AI requirements.
• Support secure deployment, DevSecOps integration, and production readiness reviews.
• Create security docs, risk reports, architecture reviews, playbooks, runbooks, and evidence.
• Track findings, vulnerabilities, risks, and remediation through closure.
• Contribute to continuous improvement of AI security posture and monitoring capabilities.
• Provide guidance on AI security controls and emerging threats.

Skills

Cyber Security

Application Security

Cloud Security

AI Security

AI threat modeling

AI risk assessment

Vulnerability management

AI governance

Prompt Injection

Model Poisoning

Data Leakage

Adversarial Attacks

Jailbreaking

Unauthorized Model Access

OWASP Top 10

OWASP LLM Top 10

MITRE ATLAS

Secure AI Development Practices

Azure OpenAI

Azure AI Services

AWS Bedrock

SageMaker

Google Vertex AI

Gemini

OpenAI

DevSecOps

Secure SDLC

API Security

IAM

Data Protection

Encryption

Security Monitoring

SIEM

Incident Response

Threat Hunting

Security Operations

Penetration testing

Compliance audits

ISO 27001

SOC2

NIST AI RMF

GDPR

HIPAA

PCI-DSS

Agile delivery

Stakeholder management

Documentation & communication

Tools

Azure OpenAI

Azure AI Services

AWS Bedrock

SageMaker

Vertex AI

OpenAI

SIEM tools

Job description

Role & responsibilities

• Assess and identify vulnerabilities, risks, and threats across AI/ML and Generative AI solutions.
• Perform AI security reviews, threat modeling, risk assessments, and security testing for AI applications.
• Design and implement security controls to protect AI models, training data, prompts, APIs, and AI infrastructure.
• Ensure confidentiality, integrity, and availability of AI systems and data.
• Monitor AI environments for security incidents, anomalies, and potential cyber threats.
• Investigate security breaches, perform root cause analysis, and drive remediation activities.
• Develop and enforce AI security standards, policies, governance frameworks, and best practices.
• Collaborate with AI engineers, architects, developers, cybersecurity teams, and business stakeholders to embed security throughout the AI lifecycle.
• Evaluate and mitigate AI-specific risks such as prompt injection, model poisoning, data leakage, adversarial attacks, and unauthorized model access.
• Ensure compliance with enterprise security, privacy, regulatory, and Responsible AI requirements.
• Support secure deployment practices, DevSecOps integration, and production readiness reviews.
• Create security documentation, risk reports, architecture reviews, playbooks, runbooks, and audit evidence.
• Track security findings, vulnerabilities, risks, and remediation activities through closure.
• Contribute to continuous improvement of AI security posture, governance processes, and security monitoring capabilities.
• Provide technical guidance and knowledge sharing on AI security controls, emerging threats, and industry best practice

Preferred candidate profile

• 6 to 8 years of experience in Cyber Security, Application Security, Cloud Security, or AI Security.
• Hands-on experience in securing Generative AI (GenAI), LLM, AI/ML, and Agentic AI solutions.
• Strong knowledge of AI threat modeling, AI risk assessment, vulnerability management, and AI governance.
• Experience in identifying and mitigating Prompt Injection, Model Poisoning, Data Leakage, Adversarial Attacks, Jailbreaking, and Unauthorized Model Access.
• Working knowledge of OWASP Top 10, OWASP LLM Top 10, MITRE ATLAS, Responsible AI, and Secure AI Development Practices.
• Experience with AI platforms such as Azure OpenAI, Azure AI Services, AWS Bedrock, Amazon SageMaker, Google Vertex AI, Gemini, or OpenAI.
• Strong understanding of DevSecOps, Secure SDLC, API Security, IAM, Data Protection, Encryption, and Cloud Security Controls.
• Hands-on experience with Security Monitoring, SIEM, Incident Response, Threat Hunting, and Security Operations.
• Experience performing security reviews, architecture assessments, compliance audits, and penetration testing activities.
• Familiarity with compliance and governance frameworks such as ISO 27001, SOC2, NIST AI RMF, GDPR, HIPAA, or PCI-DSS.
• Strong stakeholder management, documentation, communication, and Agile delivery experience.