DUTIES AND RESPONSIBILITIES

AI + AppSec Responsibilities

- Lead AI Application Security, including secure design, model security, prompt security, data protection, LLM/ML lifecycle governance.
- Perform AI Red Teaming—testing AI models for jailbreaks, hallucinations,

prompt injections, data leakage, fraud exploitation and adversarial inputs.
- Conduct Secure AI SDLC reviews across stages — dataset validation, model training, testing, deployment & monitoring.
- Evaluate risks across GenAI tools, AI agents, RPA with AI plugins, and internal automation workflows.
- Assess AI systems for bias, governance compliance, model drift, and regulatory adherence relevant to Indian NBFC sector.

Application Security (AppSec) Responsibilities
- Perform Ethical Hacking and Red Teaming activities for web, mobile, cloud and AI-integrated apps/services.
- Discover,



assess and mitigate vulnerabilities in internet-facing NBFC applications, APIs, microservices and cloud assets.
- Conduct regular VAPT, including:

o Web App Penetration Testing o Mobile App Security (Android & iOS reversing, static/dynamic analysis)

o API Security Testing o Cloud & edge services security

- Conduct secure code review, SAST, DAST, SCA and architecture review across technology stacks.
- Ensure alignment with OWASP Top 10, OWASP ML/LLM Top 10, CVSS, MITRE

ATT&CK;, MITRE ATLAS (AI-specific).
- Identify malicious code patterns, exploit chains and hacker tradecraft relevant to NBFC fraud vectors.
- Positive understanding of emerging technology stacks — API gateways,

microservices, serverless, RPA, IoT, and AI-based tools.

📌 Senior Cyber Security Manager (Pune)
🏢 HR India Solutions
📍 Pune