Job Title: AI Security Engineer
JOB PURPOSE
Air India is rapidly expanding its use of Generative AI and autonomous AI agents across customer-facing, operational, and enterprise functions. The AI Security Engineer will be a specialist responsible for identifying, testing, and mitigating security risks specific to AI and LLM-based systems deployed on Azure AI Foundry, AWS Bedrock, GCP Vertex AI, and Microsoft Copilot Studio. The role sits at the intersection of AI engineering, offensive security, and risk governance — working closely with the AI Security Posture Management (AISPM) platform and the wider D&T EA and security team.
KEY RESPONSIBILITIES
LLM & AI Risk Assessment
- Conduct formal threat modelling of AI systems using the OWASP AI Exchange matrix — covering input threats, development-time threats, runtime threats, and agentic threats.
- Assess LLM-specific risks: model inversion, membership inference, training data extraction, adversarial evasion, AI resource exhaustion (cost explosion attacks), and disclosure in output.
- Evaluate retrieval-augmented generation (RAG) pipelines for augmentation data integrity, context injection, and knowledge base poisoning risks.
- Review and classify AI-BOM (AI Bill of Materials) — model provenance, dependency chain, and supply chain risk for open-source models ingested into Bedrock or Azure AI Foundry.
- Identify and document lethal trifecta exposure across all AI agents: attacker-controlled input, access to sensitive data, and external send capability.
Cloud AI Platform Security
- Assess security configurations of Azure AI Foundry, Azure API Management (APIM), AWS Bedrock, AWS API Gateway, and GCP Apigee as AI gateway layers.
- Review model deployment configurations, IAM policies, network controls, and logging coverage across all three cloud AI platforms.
- Validate AISPM prompt firewall rules and monitor alert patterns across all integrated AI gateways
- Support integration of cloud AI telemetry (CloudTrail, Azure Monitor, Chronicle) into AISPM for unified detection and response.
- Assess Microsoft Copilot Studio agents, AWS AgentCore agents, and GCP Agent Engine deployments for misconfigurations and privilege escalation paths.
Security Architecture & Governance
- Conduct security architecture reviews of new AI systems and integrations before go-live, using the Air India OWASP-based AI review framework.
- Assess third-party AI vendor integrations for supply chain risk, DPA compliance, tenant isolation, and data exposure.
- Support Air India's ISO 42001:2023 AI risk assessment — provide evidence from red team findings and threat models.
- Work with application teams to implement OWASP AI Security controls
- Contribute to the Air India AI Security Matrix — maintain and update threat assessments for all AI systems in production.
AISPM Operations & Detection
- Triage AISPM alerts across all gateways — categorise by attack type, assess false positive rate, and refine detection thresholds.
- Develop and maintain AI-specific detection rules, guardrails, and block mode policies within the AISPM platform.
- Monitor AI agent behaviour across cloud environments using AISPM dashboards and generate weekly security reports for application teams.
- Automate red team test cases and integrate them into CI/CD pipelines for continuous AI security validation.
REQUIRED SKILLS & QUALIFICATIONS
Technical Skills (Must Have)
- Preferred experience with AccuKnox AISPM — prompt firewall configuration, agent monitoring, AI Detection & Response (AI-DR), and policy management across cloud gateways.
- Azure AI Foundry / AWS Bedrock: Working knowledge of at least one cloud AI platform — model deployment, API gateway configuration, IAM, logging, and runtime security controls.
- AI Risk Frameworks: Familiarity with OWASP AI Exchange, MITRE ATLAS, or equivalent AI threat taxonomy. Ability to map findings to named controls and STRIDE threats.
- Cloud Security: Understanding of cloud IAM, API gateway security, network policies, and logging on at least one of: Azure, AWS, or GCP.
- Offensive Security Basics: Solid grounding in web application security (OWASP Top 10), API security, and at least one of: penetration testing, VAPT, bug bounty, or CTF experience.
Good to Have
- Experience with GCP Vertex AI, GCP Agent Engine, or Microsoft Copilot Studio agent security.
- Knowledge of ML model security: serialisation exploits, model poisoning, and supply chain attacks on open-source models.
- Understanding of ISO 42001:2023 AI management system controls or ISO 27001 information security.
- Exposure to agentic AI frameworks: LangChain, LangGraph, AutoGen, CrewAI, AWS Strands, or equivalent.
- Experience with DPDP Act 2023 or GDPR data protection obligations for AI systems.
Qualifications
- Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.
- 3 years of experience in information security, with at least 1 year focused on AI/LLM security, adversarial ML, or cloud AI platform security.
- Security certifications preferred: CEH, OSCP, GPEN, GWAPT, or equivalent offensive security credential.
- AI/cloud certifications a plus: AWS Certified Security Specialty, Microsoft Azure Security Engineer (AZ-500), Google Cloud Security Engineer, or an LLM/AI-specific certification.
TOOLS & TECHNOLOGIES
The successful candidate will work with or be expected to learn:
AISPM Platform
AccuKnox AISPM — prompt firewall, agent monitoring, AI Detection & Response (AI-DR)
Cloud AI Platforms
Azure AI Foundry, AWS Bedrock, GCP Vertex AI, Microsoft Copilot Studio
AI Gateways
Azure APIM, AWS API Gateway, GCP Apigee
Web / API Security
Burp Suite, nuclei, sqlmap, ffuf, zaproxy, nikto
ML Model Security
fickling, modelscan, YARA, Syft (AI-BOM generation)
Frameworks
OWASP AI Exchange, MITRE ATLAS, NIST AI RMF, ISO 42001
