Domain Manager - Cyber Risk Unit

Bajaj Finance · Pune

  • Experience6–8 yrs
  • SalaryNot disclosed
  • Work modeonsite
  • Levelsenior
  • Posted10 Sept 2026

About Bajaj Finance

Bajaj Finance is hiring in Pune in financial services. This role looks for around 6+ years of experience.

Skills

  • AI red teaming
  • Threat modeling
  • AI guardrails
  • MITRE ATLAS
  • OWASP LLM Top 10
  • OWASP Agentic Top 10
  • OWASP Top 10
  • API Security Top 10
  • Secure SDLC
  • Prompt injection
  • Jailbreaking
  • Data poisoning
  • Model inversion
  • Model extraction
  • Model evasion
  • Backdoor activation
  • Guardrail implementation
  • Rule engine
  • Policy configuration
  • AI runtime security
  • Input/output sanitization
  • Anomaly detection
  • Rate limiting
  • Content scanning
  • Incident response
  • Root-cause analysis
  • Application security
  • Secure coding

The role

An application security engineer at a financial services company identifies and exploits AI vulnerabilities through AI red teaming and threat modeling, and builds runtime defenses with AI guardrails and MITRE ATLAS. The role also applies OWASP LLM Top 10 and secure SDLC practices.

Full job description

Job Summary

Identify and exploit vulnerabilities in AI models and systems through realistic adversarial simulations to prevent exploitation by malicious actors.

Evaluate models for security weaknesses and risks like supply chain, AIBOM vulnerabilities across GenAI Agentic platform.

Hands on experience on critical attack techniques including prompt injection, jailbreaking, data poisoning, model inversion, and good understanding on OWASP LLM Top 10, OWASP Agentic Top 10, MITRE ATLAS framework.

Plan and conduct targeted red team engagements across large language models, generative AI applications, and supporting ML infrastructure.

Produce detailed, actionable reports with clear attack reproductions, impact assessments, and recommended hardening measures.

Good understanding on Guardrail implementation, Rule engine, Policy configuration and AI Runtime security.

Safeguard live AI inference environments and deployed models against active runtime threats including model extraction, evasion, backdoor activation, and prompt-based attacks.

Implement layered runtime defenses such as input/output sanitization, anomaly detection, rate limiting, and content scanning tailored to AI workloads.

Perform threat modeling and risk analysis tailored to agentic architectures, focusing on risks such as goal misalignment, tool misuse, and privilege escalation.

Work closely with MLOps, platform, and SRE teams to embed runtime protection practices into deployment pipelines and operational processes.

Lead incident response for AI-specific security events, performing root-cause analysis, containment, and remediation with minimal service disruption.

Assess Third Party Partner vulnerabilities and security risk

Create and maintain specialized tooling, test harnesses, and automation to enable efficient, repeatable adversarial security testing for AI systems.

Regular cadence with AI Development team for secure design, suggest architectural reviews.

Connect with AI

Duties and Responsibilities Minimum Accountabilities

Engineering / Computer Graduate with 4-6 years of Information / Cyber Security Experience and minimum 1-2 years of hands-on experience on AI Red Teaming, AI Guardrails implementation will be preferred.

Additional Accountabilities

AI securityrelated certifications (Good to Have)

Key Decisions / Dimensions

Involvement in Activity calendar planning and execution of AI applications

Preparation of testcases for AI Red Teaming and highlight the risk imposing of the vulnerabilities

Major Challenges

AI Red Teaming understanding, execution, reporting timely closure from stakeholders

Change management and AI sign off with in defined TAT

Required Qualifications and Experience Qualifications

Post-Graduates with relevant security experience of 4-6years (also graduates with experience of 6-8 years may apply)

Work Experience

Engineering / Computer Graduate with 4-6 years of Information / Cyber Security Experience

Understanding of OWASP LLM Top 10, OWASP Agentic Top 10, MITRE ATLAS framework.

Common AI-specific threats: Prompt injection (direct indirect), Model poisoning data poisoning, Model theft / extraction, Hallucination abuse unsafe outputs

Threat modeling for AI systems (LLMs, RAG, agents)

Strong understanding of application security (OWASP Top 10, API Security Top 10)

Secure SDLC practices (design reviews, threat modelling, secure coding)