VAPT Engineer (AI)

A VAPT (Vulnerability Assessment and Penetration Testing) Engineer specializing in AI is responsible for securing AI-driven systems, LLMs (Large Language Models), and infrastructure against both traditional cyberattacks and specialized AI-focused threats. This role bridges traditional offensive security with AI security concepts like RAG (Retrieval-Augmented Generation) security, prompt injection, and model inversion.

Responsibilities

• Conduct VAPT on AI models, LLMs, Agents, and RAG architectures to identify vulnerabilities.
• Simulate attacks to identify AI weaknesses, including prompt injection, model evasion, and data poisoning attacks.
• Perform comprehensive VA/PT on networks, web applications, APIs, and cloud infrastructure using manual and automated tools.
• Prepare detailed, high-quality technical reports outlining findings, risks, and remediation strategies for technical and non-technical stakeholders.
• Collaborate with data science and engineering teams to implement security-by-design and fix vulnerabilities.
• Stay current with the evolving landscape of AI threats, CVEs, and the latest security testing methodologies

· Qualifications

• Strong understanding of security concepts related to LLMs, agents, and RAG.
• Proficiency in manual penetration testing techniques and tools (e.g., Burp Suite, Kali Linux, Metasploit, Nmap, Nessus).
• Proficiency in Python, Bash, or PowerShell for automating testing and developing custom exploits.
• Deep knowledge of OWASP Top 10 for web and mobile applications.
• Solid understanding of TCP/IP, network security, firewalls, and cloud platforms (AWS, Azure, GCP).
• Bachelor’s degree in Computer Science or Cybersecurity. Certifications like OSCP, CEH, or AI-specific security certifications are highly preferred.

Preferred Qualifications

• Experience with AI frameworks (e.g., PyTorch, TensorFlow) and cloud-based AI service security.
• Knowledge of adversarial machine learning detection tools.
• Familiarity with container security (Docker/Kubernetes).

Common VAPT Tool Stack

• Burp Suite Professional, OWASP ZAP, Postman.
• Nessus, Qualys, Nmap, Metasploit.
• Python (libraries), Custom scripts, Specialized AI testing frameworks

Pay: ₹2,000,000.00 - ₹3,200,000.00 per year

Experience:

• Pen Testing: 5 years (Required)
• VAPT using AI: 3 years (Required)

Work Location: Remote