Infosec Engineer

• Who are we?
• We are

Spyne

, redefining how cars are marketed and sold with cutting-edge Generative AI. What started as a bold idea—using AI-powered visuals to help dealers sell online faster—has evolved into a full-fledged AI-first automotive retail ecosystem.

Backed by

$16 M in Series A funding

from Vertex Ventures, Accel, and other top investors, we're scaling fast

• ✔ Expanded across the US & EU markets
• ✔ Launched industry-first AI-powered Image & 360° solutions
• ✔ Achieved a 5× revenue surge in 15 months, aiming for 3–4× growth this year
• 🚀

Know Our Journey

2020

: Launched as a visual merchandising platform

2023

: Pivoted to AI-driven automotive retail solutions

2024

: Achieved 5× revenue growth in 15 months, aiming for 3–4× more

Today

: Driving the GenAI revolution with AI-powered sourcing, pricing, CRM, and Agentic AI for dealerships

👉 Read more about us

Studio AI Product

Vini AI Product

Series A Announcement on YourStory

Series A Coverage in Economic Times

Autocar Pro News

• What Are We Looking For?
• We're seeking a seasoned

InfoSec Engineer

to serve as Spyne's organization-wide security architect and enforcer. This role is not about managing DevOps—it's about partnering deeply with our Engineering, ML, and Product teams to embed security into every layer of our AI-first SaaS platform.

You will protect our proprietary AI assets, our clients' sensitive automotive retail data, and the live consumer pipelines that power products like Vini AI and Studio AI. A security failure here is not just an IT issue—it directly impacts our clients' sales operations and the trust they place in us.

📍

Location

• Gurugram (Work from Office, 5 days a week)
• 🖥

Role

Full-Time, InfoSec Engineer

What Will You Do?

AI & LLM Security

Secure conversational agents (Vini AI) against prompt injection and data poisoning attacks; protect computer vision pipelines (Studio AI) from adversarial evasion techniques and model theft.

Code Security

Establish secure coding guidelines and integrate automated vulnerability scanning (SAST/SCA) directly into developer workflows and CI/CD pipelines.

API Security

Safeguard critical data pipelines and third-party CRM/DMS integrations (e.g., Tekion ARC) against unauthorized access, broken object-level authorization, and business logic abuse.

Application Security

Protect our Web App (Virtual Studio, Developer Hub) and Android/iOS mobile applications against reverse engineering, unauthorized access, and runtime exploits.

VAPT & Penetration Testing

Own and manage continuous offensive security testing—both automated vulnerability assessments and manual penetration tests—across the full product suite.

Compliance & Governance

Lead alignment with global data privacy regulations (GDPR, CCPA) and automotive industry security standards to support seamless enterprise onboarding in the US and EU.

Cross-Functional Security Enforcement

Partner with the DevOps team to define and enforce security requirements for cloud infrastructure; ensure deployment pipelines and AWS architectures meet rigorous security standards without hindering development velocity.

Security Culture

Drive security awareness programs, conduct training sessions, and build a security-first mindset across all engineering disciplines.

Incident Response

• Define, document, and lead the execution of incident response playbooks; conduct post-mortems and drive remediation.
• What You Must Have?

Experience

3-5 years in an information security or application security role, preferably within a SaaS or AI-first product company.

AI/ML Security

Demonstrated knowledge of LLM attack vectors (prompt injection, jailbreaking, data exfiltration) and computer vision model threats (adversarial inputs, model inversion).

Application Security

Strong hands-on experience with OWASP Top 10 (Web & Mobile), API security testing, and mobile app security (Android/iOS).

SAST/DAST/SCA Tools

Proficiency with tools such as Semgrep, Snyk, Burp Suite, OWASP ZAP, or equivalents.

VAPT

Proven experience conducting or managing penetration tests across web, mobile, and API surfaces; familiarity with frameworks like PTES or OWASP WSTG.

Cloud Security

Working knowledge of AWS security services and best practices (IAM, Security Groups, GuardDuty, CloudTrail, KMS, Secrets Manager); ability to audit cloud architectures for risk.

Compliance

Practical experience with GDPR, CCPA, and/or relevant industry frameworks (SOC 2, ISO 27001); experience supporting enterprise security reviews and third-party audits.

Scripting & Automation

Proficient in Python, Bash, or similar scripting languages for security automation and tooling.

Collaboration

Ability to work closely with developers, DevOps, ML engineers, and product managers—translating complex security requirements into actionable engineering tasks without blocking velocity.

Education

• Bachelor's or master's degree in Computer Science, Information Security, or a related field. Relevant certifications (OSCP, CEH, CISSP, AWS Security Specialty) are a strong plus.
• Why is Spyne an Employee-Centric Company? 🚀

Comprehensive Health & Life Coverage

– GMC, GPA, and GTLI benefits for you and your family

Performance-Driven Growth

– Fast career progression, ownership from Day 1, and stock options for top performers

Elevate Learning & Development

– Access LinkedIn Learning, mentorship programs, and hands-on AI security projects to upskill daily

Collaborative Office Culture

• – Thrive in our energetic, innovation-first workplace
• Why Spyne?

Strong Culture

A supportive, transparent environment with high autonomy

Competitive Compensation

Market-leading salary, equity, and benefits

Dynamic Growth

Join us at a pivotal growth stage—shape our security posture, processes, and future

Cutting-Edge Tech

Work on real-world AI/ML and GenAI security challenges that very few engineers get to tackle