Infosec Engineer

Who are we?

We are Spyne, redefining how cars are marketed and sold with cutting-edge Generative AI. What started as a bold idea-using AI-powered visuals to help dealers sell online faster-has evolved into a full-fledged AI-first automotive retail ecosystem.

Backed by $16 M in Series A funding from Vertex Ventures, Accel, and other top investors, we're scaling fast:

Expanded across the US & EU markets

Launched industry-first AI-powered Image & 360° solutions

Achieved a 5× revenue surge in 15 months, aiming for 3-4× growth this year

Know Our Journey

• 2020: Launched as a visual merchandising platform
• 2023: Pivoted to AI-driven automotive retail solutions
• 2024: Achieved 5× revenue growth in 15 months, aiming for 3-4× more
• Today: Driving the GenAI revolution with AI-powered sourcing, pricing, CRM, and Agentic AI for dealerships

Read more about us:

• Studio AI Product
• Vini AI Product
• Series A Announcement on YourStory
• Series A Coverage in Economic Times
• Autocar Pro News

What Are We Looking For?

We're seeking a seasoned InfoSec Engineer to serve as Spyne's organization-wide security architect and enforcer. This role is not about managing DevOps-it's about partnering deeply with our Engineering, ML, and Product teams to embed security into every layer of our AI-first SaaS platform.

You will protect our proprietary AI assets, our clients' sensitive automotive retail data, and the live consumer pipelines that power products like Vini AI and Studio AI. A security failure here is not just an IT issue-it directly impacts our clients' sales operations and the trust they place in us.

Location: Gurugram (Work from Office, 5 days a week)

Role: Full-Time, InfoSec Engineer

What Will You Do?

• AI & LLM Security: Secure conversational agents (Vini AI) against prompt injection and data poisoning attacks; protect computer vision pipelines (Studio AI) from adversarial evasion techniques and model theft.
• Code Security: Establish secure coding guidelines and integrate automated vulnerability scanning (SAST/SCA) directly into developer workflows and CI/CD pipelines.
• API Security: Safeguard critical data pipelines and third-party CRM/DMS integrations (e.g., Tekion ARC) against unauthorized access, broken object-level authorization, and business logic abuse.
• Application Security: Protect our Web App (Virtual Studio, Developer Hub) and Android/iOS mobile applications against reverse engineering, unauthorized access, and runtime exploits.
• VAPT & Penetration Testing: Own and manage continuous offensive security testing-both automated vulnerability assessments and manual penetration tests-across the full product suite.
• Compliance & Governance: Lead alignment with global data privacy regulations (GDPR, CCPA) and automotive industry security standards to support seamless enterprise onboarding in the US and EU.
• Cross-Functional Security Enforcement: Partner with the DevOps team to define and enforce security requirements for cloud infrastructure; ensure deployment pipelines and AWS architectures meet rigorous security standards without hindering development velocity.
• Security Culture: Drive security awareness programs, conduct training sessions, and build a security-first mindset across all engineering disciplines.
• Incident Response: Define, document, and lead the execution of incident response playbooks; conduct post-mortems and drive remediation.

What You Must Have?

• Experience: 3-5 years in an information security or application security role, preferably within a SaaS or AI-first product company.
• AI/ML Security: Demonstrated knowledge of LLM attack vectors (prompt injection, jailbreaking, data exfiltration) and computer vision model threats (adversarial inputs, model inversion).
• Application Security: Strong hands-on experience with OWASP Top 10 (Web & Mobile), API security testing, and mobile app security (Android/iOS).
• SAST/DAST/SCA Tools: Proficiency with tools such as Semgrep, Snyk, Burp Suite, OWASP ZAP, or equivalents.
• VAPT: Proven experience conducting or managing penetration tests across web, mobile, and API surfaces; familiarity with frameworks like PTES or OWASP WSTG.
• Cloud Security: Working knowledge of AWS security services and best practices (IAM, Security Groups, GuardDuty, CloudTrail, KMS, Secrets Manager); ability to audit cloud architectures for risk.
• Compliance: Practical experience with GDPR, CCPA, and/or relevant industry frameworks (SOC 2, ISO 27001); experience supporting enterprise security reviews and third-party audits.
• Scripting & Automation: Proficient in Python, Bash, or similar scripting languages for security automation and tooling.
• Collaboration: Ability to work closely with developers, DevOps, ML engineers, and product managers-translating complex security requirements into actionable engineering tasks without blocking velocity.
• Education: Bachelor's or master's degree in Computer Science, Information Security, or a related field. Relevant certifications (OSCP, CEH, CISSP, AWS Security Specialty) are a strong plus.

Why is Spyne an Employee-Centric Company?

• Comprehensive Health & Life Coverage - GMC, GPA, and GTLI benefits for you and your family
• Performance-Driven Growth - Fast career progression, ownership from Day 1, and stock options for top performers
• Elevate Learning & Development - Access LinkedIn Learning, mentorship programs, and hands-on AI security projects to upskill daily
• Collaborative Office Culture - Thrive in our energetic, innovation-first workplace

Why Spyne?

• Strong Culture: A supportive, transparent environment with high autonomy
• Competitive Compensation: Market-leading salary, equity, and benefits
• Dynamic Growth: Join us at a pivotal growth stage-shape our security posture, processes, and future
• Cutting-Edge Tech: Work on real-world AI/ML and GenAI security challenges that very few engineers get to tackle