Application Security Engineer

Tata Consultancy Services; Bengaluru; On-site; INR 1,800,000 - 3,800,000; Full time

Job summary

Tata Consultancy Services in Bengaluru, India seeks security engineers with 4-8 years of experience in AI security and offensive security testing to help secure enterprise AI systems. The role focuses on evaluating prompts, APIs, data pipelines, and agentic workflows with hands-on testing across RAG pipelines and model boundaries to ensure robust guardrails and secure design.

Join a team dedicated to threat modelling, identity management, and AI incident response to protect critical AI-driven

Qualifications

• Bachelor’s or Master’s in Computer Science, Cyber Security or AI/ML security.
• Hands-on experience applying OWASP application security practices and OWASP Top 10 for LLM Applications.
• Practical exposure to prompt-injection testing, jailbreak testing, model misuse assessment and AI guardrail evaluation.
• Experience testing RAG pipelines, retrieval layers, tool calls, API integrations and access controls.
• Understanding of identity, secrets management, least-privilege design, threat modelling and AI incident response.

Skills

AI security

Application security

Penetration testing

Red-teaming

Vulnerability assessment

Offensive security testing

Education

Bachelor’s/Master’s in Computer Science/Cyber Security/AI-ML Security

Job description

4 to 8 years of relevant experience in AI security, application security, penetration testing, red-teaming, vulnerability assessment or offensive security testing for enterprise systems.

• Bachelor’s/Master’s in Computer Science, Cyber Security, AI/ML Security or related discipline.
• Hands-on experience applying OWASP application security practices and OWASP Top 10 for LLM Applications to AI models, prompts, APIs, data pipelines and agentic workflows.
• Practical exposure to prompt-injection testing, jailbreak testing, model misuse assessment, sensitive data leakage testing and AI guardrail evaluation.
• Experience testing RAG pipelines, retrieval layers, tool calls, API integrations, access controls and model response boundaries.
• Understanding of identity, secrets management, least-privilege design, threat modelling, security monitoring and AI incident response.

Preferred certifications include CEH, OSCP/OSCP+, CISSP, CCSP, AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate (AZ-500), GIAC AI Platform Security (GAIPS), INE eAIS, or equivalent AI/LLM security certification.