About the role
The Bosch Group  is a leading global supplier of technology and services. Since the beginning of 2013, its operations have been divided into four business sectors: Automotive Technology, Industrial Technology, Consumer Goods, and Energy and Building Technology.
The Bosch Group comprises Robert Bosch GmbH and its roughly 360 subsidiaries and regional companies in some 50 countries. If its sales and service partners are included, then Bosch is represented in roughly 150 countries. This worldwide development, manufacturing, and sales network is the foundation for further growth.
Bosch Global Software Technologies Company Limited (BGSV)  i s 100% owned subsidiary of Robert Bosch GmbH - one of the world’s leading global suppliers of technology and services, offering end-to-end Engineering, IT, and Business Solutions.
Starting its operation from 2010 at Etown 2 in HCMC, BGSV is the first software development center of Bosch in Southeast Asia. BGSV nowadays have over 4,000 associates, with a global footprint and presence in the US, Europe, and the Asia Pacific region.
With our unique ability to offer end-to-end solutions that connect sensors, software, and services, we enable businesses to move from the traditional to digital or improve businesses by introducing a digital element in their products and processes.
🎁 Q4 JOINING BONUS
Join BGSV by  31 December 2026  and receive a Joining Bonus equivalent to  1 month gross salary , subject to program eligibility and terms & conditions.
About the Role
We are looking for a Penetration Tester to join our AI Safety & Security team, working hands-on across Bosch's growing portfolio of AI-enabled products and internal tooling — LLM deployments, agentic AI systems, and Model Context Protocol – style tool-calling integrations. Under the direction of the team's Lead AI Safety & Security Engineer, you will execute structured test plans against real systems, covering both whether an AI system behaves safely (does it refuse harmful requests, stay within its intended scope) and whether it is secure (can it be manipulated via prompt injection or tricked into misusing its tools). This is an individual-contributor role on a newly forming team — you'll be running real engagements from day one, not just shadowing them.
Key Responsibilities
• Execute penetration tests and safety evaluations against LLM-based features and AI agents, following test plans and specifications defined by the team lead.
• Run red-teaming and jailbreak testing to surface harmful, biased, or unsafe model outputs, and document reproducible findings.
• Test for prompt injection (direct and indirect), excessive agency, and tool/plugin abuse in agentic and MCP-style tool-calling systems.
• Verify human-in-the-loop and guardrail controls hold up under adversarial conditions, not just in normal use.
• Write clear, reproducible findings reports — evidence, severity, and a specific recommended fix — that both engineers and governance stakeholders can act on.
• Help build and maintain test tooling: adversarial-prompt scripts, jailbreak test cases, and MCP/tool-schema fuzzing scripts.
• Track published AI security research (OWASP LLM and Agentic Top 10s, MITRE ATLAS) and bring new attack techniques into the team's test suite.
• Work directly with AI/ML engineering teams to reproduce, triage, and confirm fixes for reported findings.
• Support the team lead in scoping and coordinating external red-teaming/pentest vendor engagements when work is outsourced.
Required Qualifications
• Bachelor's degree in Computer Science, Machine Learning, or a related field.
• 2–5 years in penetration testing, security testing, or applied AI/ML security work.
• Hands-on experience testing LLM or agentic AI systems — prompt injection, jailbreaks, or tool/plugin abuse; coursework, CTFs, or independent projects count given how new this field is.
• Working familiarity with the OWASP Top 10 for LLM Applications and/or OWASP Top 10 for Agentic Applications.
• Comfortable scripting in Python and/or JavaScript/Node to automate test cases.
• Clear, precise technical writing for findings reports.
Preferred Qualifications
• Exposure to the Model Context Protocol (MCP) or comparable agent tool-calling frameworks.
• Traditional penetration testing experience across web, API, or network targets.
• Familiarity with AI governance concepts (NIST AI RMF, ISO/IEC 42001, EU AI Act).
• Open-source security tooling contributions, CTF results, or a public research/write-up portfolio.
Relevant Certifications (any of the following a plus)
• Offensive security / penetration testing — OSCP, GPEN, GWAPT, or CEH.
• AI-specific security — ISC2 AI Security Certificate or Certified AI Security Professional (CAISP).
Why BOSCH?
Because we do not just follow trends, we  create  them. Together we turn ideas into reality, working every day to make the world of tomorrow a better place. Do you have high standards when it comes to your job? So do we. At Bosch, you will discover more than just work.
Benefits and Career Opportunities
• Working in one of the  Best Places to Work  in Vietnam and Top 30 of the  Most Innovative Companies  all over the world
• Join in a dynamic and fast-growing global company ( English-speaking  environment), with opportunity to work in global projects and being a part of innovation team contributing initiative ideas to the hi-tech world
• Onsite opportunities : short-term and long-term assignments in worldwide offices
• Engage in our  diverse training  programs which surely help strengthen both your personal and professionalism
• 13th-month  salary bonus + attractive  performance bonus  (you'll love it!) + annual performance appraisal
• 100% offered salary  and mandatory  social insurances  in 2-month probation
• 15++ days  of annual leave + 1-day of birthday leave
• Premium health insurance