red teaming

A red team that ends in a slide deck changes nothing. The interviewer wants a plan with scope, people, severity ratings, exit criteria, and a way to turn findings into permanent tests.

Part incident response, part communications, part safety engineering. The interviewer wants a calm sequence: verify, contain, fix the class of attack rather than the one prompt, and communicate honestly.

Security bugs and content jailbreaks need different handling. Pay well for impact on users and data, route model-behaviour reports elsewhere, and run targeted challenges when you want jailbreak testing.