Medal logo

Data Security Engineer

Medal

New York, NYFull-timeSeen 2mo agoStill listed 4 days ago

Evaluate my fit

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
No compensation found
Location
New York, NY
Schedule
Full-time
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

The Data Security Engineer will harden cloud infrastructure and containers, protect data pipelines with encryption and observability, and manage identity, access, and secrets. They will secure the software supply chain, lead operational security programs including threat modeling and incident response, and ensure compliance for creator and AI training data across General Intuition and Medal platforms.

Skills & qualifications

RequiredNice to have

Skills

KubernetesReliabilityThreat ModelingIncident ResponsePenetration TestingGCPCloud RunCloud SQLCloud StoragePub/SubBigQueryCloudflareAkamaiTerraformGitHub ActionsCloud IAMKMSSecret ManagerCloud LoggingSIEMOpenTelemetryHoneycombRed‑Team DrillsCompliance

Full job description

About The Company General Intuition is the frontier lab for acting in space and time. We build large action models and world models that can perceive, predict, and act across virtual and physical environments. General Intuition builds on the strength of Medal, the world's largest and fastest-growing platform for gaming clips, where millions of gamers capture, share, and discover new games every year. We've raised over $670M from Khosla, GC, Valor, and Point72 since October 2025, and recently closed our latest round at a $6.2B valuation. The Role This role secures the infrastructure bridging GI's AI research and Medal's creator platform. You will harden our cloud environments, protect our data pipelines, and ensure our deployment systems are safe from supply-chain attacks and other threats. You'll design secure-by-default foundations without slowing down research or product teams, blending off-the-shelf security tooling with custom guardrails where necessary. Your work directly reduces operational risk across both General Intuition and Medal. What We're Looking For

  • You harden GCP (AWS equivalents fine), Kubernetes, and containers from the inside out - workload isolation, network segmentation, IAM discipline, and secure-by-default guardrails baked into Terraform, CI/CD, and deployments.

  • You protect the data pipelines - encrypting and isolating the video/metadata ETL, with full logging and observability (Cloud Logging, SIEM, OpenTelemetry, Honeycomb) into how AI training data moves and is used.

  • You own identity, access, and secrets - privileged-access visibility, key rotation, least-privilege baselines, workload identity, and PKI (cloud-native KMS / Secret Manager).

  • You secure the software supply chain - scanned builds and dependencies, artifact provenance, hardened GitHub Actions runners.

  • You run the op-sec program - threat modeling, red-team and tabletop drills, incident response, and external pen-tests.

  • You keep us compliant across creator data and AI training data.

Our Stack Cloud: GCP (GKE, Cloud Run, Cloud SQL, GCS, Pub/Sub, BigQuery), Cloudflare + Akamai edge · IaC & CI/CD: Terraform, GitHub Actions · Identity & secrets: Cloud IAM, workload identity, KMS / Secret Manager · Observability: Cloud Logging, SIEM, OpenTelemetry, Honeycomb

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.

Evaluate my fit