Lead Product Engineer Security II

HCLSoftware; Bengaluru; In loco; INR 2.500.000 - 5.000.000; Tempo pieno

Descrizione del lavoro

HCLSoftware in Bengaluru is seeking a Lead Product Engineer Security to identify and exploit security weaknesses in AI/ML systems, applications, and models embedded within HCL Software products. You will join AI/ML engineering, DevOps, and Product Development teams to design and run advanced AI security testing strategies for AI-enabled applications.

The role requires hands-on experience with AI/ML architectures, prompt injection risks, and robust vulnerability reporting to improve security

Competenze

• 5+ years of experience in Application Security or Penetration Testing.
• Strong knowledge of web application and API security testing.
• Experience with security testing tools such as Burp Suite, OWASP ZAP, Metasploit, and Nmap.
• Understanding of AI/ML architectures including LLMs, ML pipelines, and model security.

Mansioni

• Perform penetration testing of AI-powered applications and systems, including LLM-based applications, AI APIs, and ML pipelines.
• Identify vulnerabilities such as prompt injection, data leakage, insecure model outputs, model extraction, and adversarial inputs.
• Conduct red-teaming exercises for generative AI systems to simulate abuse scenarios.
• Evaluate AI systems for model integrity, training data risks, and inference security weaknesses.
• Collaborate with AI/ML engineering teams to ensure security best practices are embedded in model development and deployment.
• Develop attack methodologies and frameworks for AI security testing.
• Assess security risks associated with AI model hosting platforms, APIs, and inference services.
• Provide detailed vulnerability reports and remediation guidance to engineering teams.
• Integrate AI security testing into the Secure SDLC process.
• Research emerging threats in AI/ML security and adversarial machine learning.
• Work with internal and external teams to enhance AI security posture across HCL Software products.

Conoscenze

Security testing

AI security

Penetration testing

Strumenti

Burp Suite

OWASP ZAP

Metasploit

Nmap

AppScan

Black Duck

Fortify

Descrizione del lavoro

The Lead Product Engineer Security will be responsible for identifying and exploiting security

weaknesses in AI/ML systems, applications, and models embedded within HCL Software

products. This role focuses on evaluating the resilience of AI systems against emerging threats

such as prompt injection, data poisoning, model manipulation, adversarial attacks, and

The individual will work closely with AI/ML engineering teams, DevOps, and Product

Development groups to design and execute advanced security testing strategies for AI-

enabled applications. The role will also support the secure adoption of different types of AI

technologies across the organization while ensuring adherence to secure development

practices.

What You Will Be Doing

• Perform penetration testing of AI-powered applications and systems, including LLM-based applications, AI APIs, and ML pipelines
• Identify vulnerabilities such as prompt injection, data leakage, insecure model outputs, model extraction, and adversarial inputs
• Conduct red-teaming exercises for generative AI systems to simulate abuse scenarios
• Evaluate AI systems for model integrity, training data risks, and inference security weaknesses
• Collaborate with AI/ML engineering teams to ensure security best practices are embedded in model development and deployment
• Develop attack methodologies and frameworks for AI security testing
• Assess security risks associated with AI model hosting platforms, APIs, and inference services
• Provide detailed vulnerability reports and remediation guidance to engineering teams
• Integrate AI security testing into the Secure SDLC process
• Research emerging threats in AI/ML security and adversarial machine learning
• Work with internal and external teams to enhance AI security posture across HCL Software products

Required Qualifications / Experience

Skills

• Security requirements.
• Market-leading tools: AppScan, Black Duck, Fortify, etc.
• Implementation and usage of AI in the VAPT.

Must-Have Technical Skills

• 5+ years of experience in Application Security, Penetration Testing, or Offensive Security
• Strong knowledge of web application and API security testing
• Experience with security testing tools such as **Burp Suite, OWASP ZAP, Metasploit, and Nmap
• Understanding of AI/ML architectures including LLMs, ML pipelines, and model

Must-Have Functional Skills

• Ability to simulate attacks against AI models and AI-driven applications
• Strong knowledge of OWASP Top 10 and AI-specific security risks
• Experience working with development teams to remediate security vulnerabilities
• Strong analytical and problem-solving skills

Nice-to-Have Skills

• Knowledge of LLM security risks (prompt injection, jailbreak attacks, hallucination
• Familiarity with AI security frameworks such as OWASP Top 10 for LLM Applications
• Experience with Python-based AI/ML environments (TensorFlow, PyTorch, or similar
• Understanding of Adversarial Machine Learning concepts
• Experience testing AI APIs or AI-powered SaaS platforms
• Knowledge of cloud platforms such as AWS, Azure, or GCP

Certifications (Preferred)

• AI or ML security related certifications (if available)