[EJV] Lead AI Security Engineer (LLM & Agentic AI) - with Joining Bonus
Bosch Global2 months ago
Ho Chi Minh City, VietnamStaff+
Responsibilities
- Design and run safety evaluations, red-team exercises, jailbreak tests, guardrail-bypass tests, and benchmarking for LLM features and AI agents.
- Perform security testing for prompt injection, excessive agency, tool/plugin abuse, confused-deputy risks, and MCP-style tool-calling architectures.
- Build threat models covering user input, model reasoning, tool execution, data exposure, and consequential actions.
- Verify the architectural soundness of human-in-the-loop controls and guardrails.
- Scope, brief, and review external red-teaming and penetration-testing engagements and define test specifications and acceptance criteria.
- Apply OWASP, NIST AI RMF, ISO/IEC 42001, and EU AI Act guidance to internal engineering and governance requirements.
- Partner with AI/ML engineering teams, produce compliance evidence, build testing tools, mentor engineers, and grow the safety/security testing practice.
Requirements
- Bachelor’s or master’s degree in computer science, machine learning, or a related field.
- At least 6 years of security-testing experience.
- At least 2 years of AI/ML safety research or closely related experience with evidence of finding issues in real systems.
- At least 2 years of practical LLM or agentic AI testing and red-teaming experience; independent research or open-source contributions are accepted.
- Working knowledge of at least one AI safety or governance framework, such as NIST AI RMF, ISO/IEC 42001, or the EU AI Act.
- Coding ability in Python and/or JavaScript/Node for building evaluation harnesses and test tooling.
- Strong technical writing skills for producing actionable findings and specifications for engineering and governance stakeholders.
- Preferred qualifications include MCP or comparable agent tool-calling experience, traditional web/API/network penetration testing, OSCP or equivalent, AI governance experience, relevant publications or open-source security tooling, and experience mentoring or building a testing team.
- Relevant certifications include OSCP, OSWE, OSEP, GPEN, GWAPT, CEH, ISC2 AI Security Certificate, Certified Offensive AI Security Professional, CAISP, ISO/IEC 42001 Lead Auditor or Lead Implementer, and IAPP AIGP.
Benefits
- Joining bonus equivalent to one month’s gross salary for eligible employees joining by 31 December 2026.
- 13th-month salary bonus, performance bonus, and annual performance appraisal.
- Salary and mandatory social insurance are provided during the two-month probation period.
- More than 15 days of annual leave plus one birthday leave day.
- Premium health insurance for the employee and two family members.
- Flexible working time and working model.
- English-speaking environment, global projects, training programs, and short- and long-term worldwide assignment opportunities.
- Lunch and parking allowances plus company activities including sports, yoga, aerobics, and team building.
Tech Stack
Categories
About Bosch Global
Bosch Global (Robert Bosch GmbH) develops and sells mobility components and software, industrial automation and sensors, home appliances and power tools, and energy and building technologies to automakers, manufacturers, builders, and consumers. It monetizes through product sales and connected services spanning IoT, AI, and embedded software. Founded in 1886 and headquartered in Gerlingen-Schillerhöhe, Germany, the privately held Bosch Group operates worldwide across Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology sectors.