About Spire.AI: Spire.AI is a deep-tech Context Intelligence company and a global pioneer in domain-aware AI operating models for solving complex enterprise objectives. The Spire.AI context intelligence technology platform, OpenKnowra™, has been engineered to bridge the gap between fragmented enterprise data and actionable intelligence, enabling enterprises to create a Contextual AI layer that solves for complex objectives by delivering coherent autonomy in designed operating frameworks.
Built on the proprietary SpiroBot® knowledge graph and configurable deep-domain operating models in real enterprise environments, OpenKnowra connects multi-structured data, organizational semantics, and business rules into a unified context fabric. This allows enterprises to reason across complexity, maintain governance and explainability bydesign, and apply intelligence with precision across end-to-end objectives rather than isolated automation.
Role: Own security and operational resilience across our hybrid cloud (AWS + GCP) and internal IT systems, while supporting technical controls for our compliance certifications. This role requires comfort operating with ambiguity in a fast moving AI SaaS company, and being the first point of response for infrastructure/security incidents, including outside standard hours given our global customer base.
Key Responsibilities
IT & Infrastructure
- Own hardware/software asset lifecycle: procurement, upgrades, decommissioning
- Own incident and change management for infrastructure and cloud security within SLAs
- Maintain and test BCP/DR plans across cloud workloads
Cloud & Security
- Own security posture across AWS (IAM, VPC, encryption, CloudTrail/GuardDuty) and GCP (IAM, VPC Service Controls, Security Command Center)
- Harden compute, container, serverless, and database workloads on both platforms
- Own vulnerability management end to end; lead VAPT coordination and remediation
- Implement EDR/XDR, NDR, firewalls, CSPM, CIEM
- Administer IAM/SSO/MFA across cloud and SaaS; run access reviews
- Pilot AI/GenAI tools for security operations and log triage, bringing genuine interest in applying AI to security automation and observability
Compliance Support
- Technical control owner for ISO 27001:2022; support ISO 42001 and SOC 2 Type II audit cycles
- Support DPDP Act 2023 technical safeguards
- Provide technical input on vendor/customer security questionnaires
- Run risk assessments and threat modeling in close collaboration with engineering
Program & Relationship Management
- Embed security into engineering/product deployment practices, working closely with GRC, engineering, and product teams
- Run periodic security awareness training, with strong written communication for technical documentation and exec level reporting
- Manage vendor/cloud provider security SLAs
- Act as primary escalation point for infrastructure/security incidents, including off hours, with flexibility to support customers and stakeholders across time zones and treating infrastructure availability as a personal responsibility
Required Qualifications
- 8+ years in IT infrastructure and/or cloud security, with hands-on ownership of security operations
- Strong hands-on AWS and GCP experience (IAM, networking, security services) in hybrid setups
- Working knowledge of ISO 27001, SOC 2, or similar frameworks
- Experience with vulnerability management, incident response, EDR/XDR, NDR, CSPM, CIEM
- Scripting/automation skills (Python, Bash, or similar)
- Bachelor's degree in CS, IT, or related field (or equivalent experience)
