[EJV] Penetration Tester — AI Safety & Security
Bosch Global2 days ago
Ho Chi Minh City, VietnamMid Level / Senior
Responsibilities
- Execute penetration tests and safety evaluations against LLM-based features and AI agents.
- Conduct red-teaming and jailbreak testing and document harmful, biased, unsafe, or insecure behaviors.
- Test direct and indirect prompt injection, excessive agency, tool/plugin abuse, human-in-the-loop controls, and guardrails.
- Write reproducible findings reports covering evidence, severity, and recommended fixes.
- Build and maintain adversarial-prompt scripts, jailbreak test cases, and MCP/tool-schema fuzzing scripts.
- Track AI security research and incorporate new attack techniques into test suites.
- Collaborate with AI/ML engineering teams to reproduce, triage, and verify fixes.
- Support scoping and coordination of external red-teaming and penetration-testing vendor engagements.
Requirements
- Bachelor’s degree in Computer Science, Machine Learning, or a related field.
- 2–5 years of experience in penetration testing, security testing, or applied AI/ML security.
- Hands-on experience testing LLM or agentic AI systems, including prompt injection, jailbreaks, or tool/plugin abuse; coursework, CTFs, or independent projects count.
- Working familiarity with the OWASP Top 10 for LLM Applications and/or OWASP Top 10 for Agentic Applications.
- Scripting experience in Python and/or JavaScript/Node.
- Clear and precise technical writing for findings reports.
- Preferred: exposure to Model Context Protocol or comparable agent tool-calling frameworks.
- Preferred: traditional penetration testing across web, API, or network targets.
- Preferred: familiarity with NIST AI RMF, ISO/IEC 42001, or the EU AI Act.
- Preferred: open-source security tooling contributions, CTF results, or a public research/write-up portfolio.
- Relevant certifications such as OSCP, GPEN, GWAPT, CEH, ISC2 AI Security Certificate, or CAISP are a plus.
Benefits
- Global English-speaking environment with opportunities to work on international projects and innovation initiatives.
- Short-term and long-term assignment opportunities at worldwide offices.
- Diverse training programs and career-development opportunities.
- 13th-month salary bonus, performance bonus, and annual performance appraisal.
- Salary and mandatory social insurance provided during the 2-month probation period.
- More than 15 days of annual leave plus 1 day of birthday leave.
- Premium health insurance for the employee and two family members.
- Flexible working time and working model.
- Lunch and parking allowances.
- Company activities including football, badminton, yoga, aerobics, and team building.
Tech Stack
Categories
About Bosch Global
Bosch Global (Robert Bosch GmbH) develops and sells mobility components and software, industrial automation and sensors, home appliances and power tools, and energy and building technologies to automakers, manufacturers, builders, and consumers. It monetizes through product sales and connected services spanning IoT, AI, and embedded software. Founded in 1886 and headquartered in Gerlingen-Schillerhöhe, Germany, the privately held Bosch Group operates worldwide across Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology sectors.