Platform Engineer III

Job description

We are seeking a Vision AI Security Engineer to ensure the security, resilience, and trustworthiness of the VisionX platform, including computer vision solutions, AI/ML models, video analytics pipelines, and GenAI-powered capabilities. The ideal candidate will combine expertise in cybersecurity, AI security, and secure software engineering to identify, assess, and mitigate vulnerabilities, adversarial threats, model risks, and misuse scenarios across the end-to-end AI ecosystem. Key Responsibilities Own end-to-end security for Vision AI platforms, covering UI, APIs, microservices, workflows, integrations, AI models, and cloud deployments.Define and implement AI security strategies, threat models, risk assessments, security policies, and release security sign-off criteria.Perform security assessments, vulnerability analysis, and penetration testing across applications, APIs, infrastructure, cloud environments, and AI workloads.Evaluate application and API security controls, including authentication, authorization, RBAC, token management, secrets handling, and injection prevention mechanisms.Identify and mitigate AI-specific threats, including adversarial attacks, prompt injection, jailbreak attempts, model evasion, data poisoning, model theft, and sensitive data exposure.Assess and secure GenAI/LLM solutions, ensuring robust prompt handling, secure tool/function calling, data protection, and misuse prevention controls.Review and validate the security of RAG architectures, including content ingestion, retrieval boundaries, grounding integrity, source trustworthiness, and data access controls.Ensure secure handling of sensitive and regulated data, including privacy controls, PII protection, encryption, and compliance requirements across AI pipelines.Assess the security posture of computer vision and video analytics solutions, including image/video ingestion pipelines, inference services, edge deployments, and connected devices.Drive application security testing using SAST, DAST, SCA, container, and cloud security assessment tools; prioritize findings and support remediation validation.Integrate automated security validation into CI/CD pipelines to enable continuous security monitoring and DevSecOps practices.Conduct red-team exercises, attack simulations, abuse-case testing, and adversarial AI assessments to evaluate platform resilience against emerging threats.Validate security-related operational controls, including rate limiting, throttling, API protection, monitoring, logging, and incident response readiness.Lead security issue triage, root-cause analysis, risk reporting, and compliance activities across the Vision AI ecosystem.Collaborate with architects, engineering, MLOps, and DevOps teams to implement secure-by-design principles and effective mitigation strategies throughout the AI solution lifecycle.Ensure Vision AI solutions meet security, privacy, regulatory, and production-readiness standards before deployment. Skill Requirements Strong knowledge of application security, secure SDLC, threat modeling, vulnerability management, and security-by-design principles.Hands-on experience with application security assessment tools such as OWASP ZAP, Burp Suite, SonarQube, SAST, DAST, SCA, and other enterprise security platforms.Deep understanding of OWASP Top 10, API Security Top 10, authentication and authorization frameworks (OAuth2, JWT, SSO, RBAC), and access control mechanisms.Proven experience securing web applications, APIs, cloud-native solutions, microservices, and enterprise integrations using modern security frameworks and best practices.Proficiency in Python scripting and security automation to enable scalable security validation, monitoring, and DevSecOps implementations.Strong understanding of AI/ML architectures, model lifecycles, data pipelines, and security considerations across AI-powered systems.Experience securing GenAI and LLM-based applications, including protection against prompt injection, jailbreak attacks, unsafe outputs, model abuse, and data leakage risks.Knowledge of RAG security principles, including grounding integrity, retrieval controls, source trust validation, vector database security, and prevention of unauthorized data exposure.Understanding of AI-specific threat models, including adversarial attacks, data poisoning, model evasion, model theft, and privacy-related risks.Experience assessing the security of computer vision and video analytics solutions, including image/video ingestion pipelines, inference services, edge AI deployments, and connected devices.Familiarity with cloud security concepts across Azure, AWS, or GCP, including IAM, network security, secrets management, container security, and workload protection.Strong knowledge of security monitoring, incident response, risk assessment, compliance, and governance frameworks relevant to AI and enterprise applications. Other Requirements null Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of