About the role
Infosec Engineer Gurugram Full-Time Who are we? We are Spyne , redefining how cars are marketed and sold with cutting-edge Generative AI. What started as a bold idea—using AI-powered visuals to help dealers sell online faster—has evolved into a full-fledged AI-first automotive retail ecosystem. Backed by $16 M in Series A funding from Vertex Ventures, Accel, and other top investors, we're scaling fast: ✔ Expanded across the US & EU markets ✔ Launched industry-first AI-powered Image & 360° solutions ✔ Achieved a 5× revenue surge in 15 months, aiming for 3–4× growth this year 🚀 Know Our Journey 2020 : Launched as a visual merchandising platform 2023 : Pivoted to AI-driven automotive retail solutions 2024 : Achieved 5× revenue growth in 15 months, aiming for 3–4× more Today : Driving the GenAI revolution with AI-powered sourcing, pricing, CRM, and Agentic AI for dealerships 👉 Read more
about us: Studio AI Product Vini AI Product Series A Announcement on YourStory Series A Coverage in Economic Times Autocar Pro News What Are We Looking For? We're seeking a seasoned InfoSec Engineer to serve as Spyne's organization-wide security architect and enforcer. This role is not about managing DevOps—it's about partnering deeply with our Engineering, ML, and Product teams to embed security into every layer of our AI-first SaaS platform. You will protect our proprietary AI assets, our clients' sensitive automotive retail data, and the live consumer pipelines that power products like Vini AI and Studio AI. A security failure here is not just an IT issue—it directly impacts our clients' sales operations and the trust they place in us. 📍 Location: Gurugram (Work from Office, 5 days a week) 🖥 Role: Full-Time, InfoSec Engineer What Will You Do? AI & LLM Security: Secure conversational agents (Vini AI) against prompt injection and data poisoning attacks; protect computer vision pipelines (Studio AI) from adversarial evasion techniques and model theft. Code Security: Establish secure coding guidelines and integrate automated vulnerability scanning (SAST/SCA) directly into developer workflows and CI/CD pipelines. API Security: Safeguard critical data pipelines and third-party CRM/DMS integrations (e.g., Tekion ARC) against unauthorized access, broken object-level authorization, and business logic abuse. Application Security: Protect our Web App (Virtual Studio, Developer Hub) and Android/iOS mobile applications against reverse engineering, unauthorized access, and runtime exploits. VAPT & Penetration Testing: Own and manage continuous offensive security testing—both automated vulnerability assessments and manual penetration tests—across the full product suite. Compliance & Governance: Lead alignment with global data privacy regulations (GDPR, CCPA) and automotive industry security standards to support seamless enterprise onboarding in the US and EU. Cross-Functional Security Enforcement: Partner with the DevOps team to define and enforce security