AI Penetration Tester - Cybersecurity Team

$117,200 - $250,200/Yr

Microsoft - Redmond, WA

Full-time - Mid Level

Redmond, WA

5,001-10,000 employees

Publishing Industries

About the position

The AI Penetration Tester will be part of the Trust and Integrity Protection (TrIP) team at Microsoft, focusing on identifying and exploiting security vulnerabilities in AI systems. This role involves conducting penetration tests on cutting-edge technology implementations, particularly in the realm of Artificial Intelligence, to enhance security measures and protect user data. The position requires a strong technical background and a passion for cybersecurity, with responsibilities that include developing tools for vulnerability discovery and collaborating with various teams to mitigate identified risks.

Responsibilities

• Discover and exploit vulnerabilities end-to-end in order to assess the security of AI systems.
• Execute offensive operations on production AI systems using real-world adversarial tactics and techniques to identify failures.
• Develop tools and techniques to scale and accelerate offensive emulation and vulnerability discovery specific for AI systems.
• Collaborate with teams to influence measurement and mitigations of these vulnerabilities in AI systems.
• Research new and emerging threats to inform the organization, including prompt injection, to improve red teaming efficacy and accuracy.
• Regularly assess security, identify and fix vulnerabilities, create threat models, review code for security flaws, and perform security tests (SAST, DAST, IAST) to uncover application vulnerabilities.

Requirements

• Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, PowerShell or Python OR equivalent experience.
• 4+ years experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection.
• 4+ years of experience using common penetration testing tools such as Kali Linux, Burpsuite, Nmap, Nessus.

Nice-to-haves

• Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Master's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Penetration testing qualifications such as PNPT, GPEN/GXPN, GWAPT, OSCP/OSCE, CRT/CCT/CCSAS and/or equivalent.
• Familiarity with MITRE ATLAS/OWASP top 10 LLMS.
• Proficient in developing novel tooling and techniques, as well as utilizing existing methodologies.

Benefits

• Health insurance
• 401k
• Paid holidays
• Flexible scheduling
• Professional development
• Tuition reimbursement