AI Security+ VAPT

Consultant - AI Security Testing & LLM Security Assessment
Job Title
Consultant AI Security Testing & LLM Security Assessment
Experience
4-6 Years
Location
Mumbai
Service Line
Cyber Security | AI Security | Digital Trust

Role Overview
We are seeking a highly motivated Consultant to join our AI Security practice and help organizations secure Generative AI, Large Language Models (LLMs), Agentic AI solutions, Machine Learning platforms, and AI-enabled business applications.
The candidate will support AI security assessments, AI red teaming engagements, AI governance reviews, secure AI architecture reviews, and adversarial testing activities across emerging AI technologies. The role involves working with global clients to identify vulnerabilities, evaluate AI security controls, simulate adversarial attacks, and strengthen AI resilience against evolving threats.
The ideal candidate should possess a strong background in application security, penetration testing, cloud security, or AI/ML security, along with a keen interest in Generative AI and emerging AI threats.

Key Responsibilities
AI Security Testing & Red Teaming

• Perform security assessments of Generative AI, LLM-based applications, AI Agents, Copilots, RAG implementations, and ML systems.

• Execute AI red team exercises against AI systems to identify:

• Prompt Injection

• Jailbreak attacks

• Data Leakage

• Sensitive Information Disclosure

• Model Manipulation

• Model Theft

• Training Data Extraction

• Hallucination Risks

• AI Abuse Scenarios

• Agentic AI Exploitation

• Conduct adversarial testing and attack simulations against AI applications and APIs.

• Evaluate trust boundaries, attack surfaces, data flows, and model interactions.

LLM & Agentic AI Security

• Assess security of LLM-based applications leveraging OpenAI, Anthropic, Gemini, Llama, Mistral, Azure OpenAI, and other foundation models.
• Review RAG architectures, Vector Databases, AI Gateways, MCP implementations, memory systems, plugins, and AI agent frameworks.
• Perform guardrail effectiveness testing and validation.
• Conduct system prompt reviews and prompt hardening exercises.
• Assess Agentic AI workflows, tool calling mechanisms, orchestration layers, and autonomous decision-making controls.

Security Architecture Reviews

• Conduct secure design reviews for AI and ML platforms.

• Review AI security architectures deployed on Azure, AWS, and GCP.

• Evaluate:

• Model Security

• Data Security

• API Security

• Runtime Security

• Authentication & Authorization

• Non-Human Identity (NHI) controls

• Synthetic Data Protection

• AI Supply Chain Security

AI Governance & Compliance

• Support AI Governance and AI Risk Assessments.

• Map observations against:

• NIST AI RMF

• ISO 42001

• OWASP LLM Top 10

• OWASP Agentic Top 10

• MITRE ATLAS

• EU AI Act

• Responsible AI frameworks

• Assist in development of AI security maturity assessments and gap analyses.

• Review AI policies, standards, procedures, and governance controls.

Research & Innovation

• Track emerging AI attack techniques and evolving threat landscape.
• Contribute to development of AI security methodologies, accelerators, and testing playbooks.
• Support enhancement of proprietary AI security tools and automation capabilities.
• Develop proof-of-concepts for emerging AI security scenarios.

Technical Skills Required
Core Security Skills

• Web Application Security Testing
• API Security Testing
• Penetration Testing
• Threat Modeling
• Secure SDLC
• Vulnerability Assessment
• Cloud Security

AI Security Skills
Experience in one or more of the following:

• LLM Security Testing
• AI Red Teaming
• Prompt Injection Testing
• Agentic AI Security
• RAG Security Reviews
• AI Governance
• AI Threat Modeling
• Model Security Reviews
• AI Risk Assessments

Tools & Technologies
Preferred exposure to:

• Burp Suite
• OWASP ZAP
• Postman
• Python
• LangChain
• LangGraph
• CrewAI
• Microsoft Copilot Studio
• Azure OpenAI
• OpenAI APIs
• AWS Bedrock
• Vertex AI
• Vector Databases (Pinecone, Chroma, Weaviate, FAISS)
• GitHub / GitLab

Programming & Scripting
Working knowledge of:

• Python
• REST APIs
• JSON
• YAML
• JavaScript (Preferred)
• PowerShell/Bash (Preferred)

Desired Certifications
Preferred certifications include:

• CEH
• OSCP
• GWAPT
• GPEN
• CCSK
• Microsoft Azure Security Certifications
• ISC2 CC / CISSP
• Artificial Intelligence Security certifications
• Prompt Engineering or GenAI Certifications

Educational Qualifications

• Bachelor's or Master's degree in:

• Computer Science

• Information Security

• Cyber Security

• Artificial Intelligence

• Data Science

• Related Engineering disciplines

Preferred Candidate Profile

• 4-6 years of experience in Cyber Security, Application Security, Cloud Security, or Penetration Testing.
• Hands-on experience conducting security assessments.
• Demonstrated interest in AI Security and emerging technologies.
• Ability to articulate technical findings to business and executive stakeholders.
• Strong analytical, problem-solving, and report-writing capabilities.
• Experience working in consulting environments and client-facing engagements.