Assistant Manager / Manager - VAPT+AI Security

Contactx Resource Management; Mumbai, Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Contactx Resource Management seeks an AI Security Lead for Mumbai/Pune to drive secure-by-design AI architectures across data, training and deployment stages. You will assess AI systems, lead red-teaming, and shape defense-in-depth strategies for GenAI and MLOps environments.

Ideal candidates have strong cybersecurity fundamentals, hands-on AI/ML security experience, and the ability to mentor teams while engaging with clients on risk-based security decisions.

Qualifications

• Strong understanding of cybersecurity fundamentals (IAM, AppSec, Cloud Security, Threat Modeling).
• Practical understanding of AI/ML and GenAI architectures, including: Model training vs inference, LLMs, agents, and RAG patterns.
• Experience with AI security assessments or testing; Secure MLOps / DevSecOps pipelines.
• Offensive security or adversarial testing is preferred.

Responsibilities

• Lead and review AI security architecture for AI platforms, pipelines, and MLOps environments.
• Define and embed secure-by-design principles across data ingestion, training pipelines, model hosting, inference APIs, and AI agents.
• Advise clients on defense-in-depth approaches aligned to Zero Trust and enterprise security patterns.
• Perform AI threat modeling covering data poisoning, model inversion, backdoors, and CI/CD security controls.
• Review secure MLOps pipelines, CI/CD controls, and isolation mechanisms.
• Translate red team findings into actionable remediation roadmaps for engineering and leadership.
• Mentor junior team members on AI security concepts and delivery.

Skills

IAM

AppSec

Cloud Security

Threat Modeling

AI Security

GenAI architectures

MLOps security

Offensive security

Adversarial testing

Communication

Tools

MITRE ATLAS

CI/CD security

Job description

Big 4 Hiring for VAPT+AI SECURITY//MUMBAI,PUNE (Immediate/30/45 Days joiners)

Job Description

Experience: Assistant Manager (3-5 years) | Manager (5-8 years)

Key Responsibilities

1. AI Security Architecture & Secure-by-Design Advisory

• Lead and review AI security architecture for:
• AI platforms, pipelines, and MLOps environments
• GenAI applications (LLMs, copilots, agents, RAG pipelines)
• Define and embed securebydesign principles across:
• Data ingestion and training pipelines
• Model hosting, inference APIs, and AI agents
• Identity, access control, and isolation for AI systems
• Advise clients on defenseindepth approaches aligned to:
• Zero Trust (NHI, IAM) for AI
• Enterprise cloud and application security patterns
• AIspecific threat models2. AI Security Across the AI Lifecycle
• Data & Training Phase
• Assess risks related to:
• Data poisoning, bias manipulation, and training data leakage
• Weak provenance, lineage, and thirdparty data dependencies
• Define controls for secure data handling and integrity validation.
• Model Development & FineTuning
• Perform AI threat modeling covering:
• Model inversion and extraction
• Backdoored or trojaned models
• Review secure MLOps pipelines, CI/CD controls, and isolation mechanisms.
• Deployment & Inference
• Secure AI runtime environments across cloud, containerized, and hybrid setups.
• Define controls for:
• Prompt injection resistance
• Output filtering, guardrails, and misuse prevention
• Abuse scenarios in GenAI and agentbased systems

Monitoring & Operations

• Support AI Security Posture Management (AISPM) and continuous assurance.
• AI Red Teaming & Adversarial Testing
• Plan and execute AI Red Team engagements, including:
• Prompt injection and jailbreak testing
• Model misuse, data exfiltration, and policy bypass scenarios
• AIenabled attack simulations
• Apply industry frameworks such as:
• MITRE ATLAS
• OWASP Top 10 for LLM Applications
• OWASP Agentic AI
• NIST AI RMF
• Design custom adversarial scenarios aligned to client context and risk appetite.
• Translate red team findings into actionable remediation roadmaps for engineering andleadership teams.
• Engagement Leadership & Practice Contribution
• Manage small to midsized AI security engagements or workstreams.
• Act as a subjectmatter resource for AI security across pursuits and proposals.
• Mentor junior team members on AI security concepts and delivery.
• Contribute to thought leadership, playbooks, and internal enablement on AIsecurity and red teaming.

Required Skills & Experience

• Strong understanding of cybersecurity fundamentals (IAM, AppSec, Cloud Security,Threat Modeling).
• Practical understanding of AI/ML and GenAI architectures, including:
• Model training vs inference
• LLMs, agents, and RAG patterns
• Experience with:
• AI security assessments or testing
• Secure MLOps / DevSecOps pipelines
• Offensive security or adversarial testing (preferred)

Preferred Certifications

• CAI/ML Pen Certificate (Certified AI/ML Penetration Testing)
• CEH, OSCP, or equivalent offensive security certification
• GIAC certifications (GPEN, GWAPT, GCTI)
• Cloud Security certifications (AWS / Azure / GCP)
• AI Governance / Responsible AI certifications or NIST AI RMF training
• CISSP / CCSP (advantageous)

Personal Attributes

• Strong analytical and problemsolving mindset for emerging and ambiguous risks.
• Ability to communicate deep technical issues to senior stakeholders.
• Comfortable operating at the intersection of security, data science, andengineering.
• Interest in AI security research, AIenabled attacks, and futurefacing security.