Cloud Data Security Engineer - Protect AI Pipelines

Medal; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

Medal seeks a security-focused infrastructure engineer to harden cloud environments, protect data pipelines, and ensure secure deployments for our creator platform. You will integrate security into Terraform, CI/CD, and Kubernetes workflows while maintaining fast, research-friendly operations.

The role emphasizes threat modeling, incident response, and compliance across AI training data and creator data across both General Intuition and Medal ecosystems.

Qualifications

• Experience hardening cloud environments (GCP/AWS) with workload isolation and network segmentation.
• Strong knowledge of IAM discipline, least-privilege, key rotation, and secret management.
• Experience securing software supply chains, artifact provenance, and hardened runners.

Responsibilities

• Harden cloud environments and deployment systems against threats.
• Protect data pipelines with encryption, isolation, and full logging/observability.
• Own identity, access, and secrets management and PKI.
• Secure the software supply chain with scanned builds and provenance.

Skills

Kubernetes security

Cloud security

IAM Secrets

CI/CD security

GitHub Actions

Secure-by-default

Tools

Terraform

GitHub Actions

Cloud IAM

KMS / Secret Manager

OpenTelemetry

Job description

Medal seeks a security-focused infrastructure engineer to harden cloud environments, protect data pipelines, and ensure secure deployments for our creator platform. You will integrate security into Terraform, CI/CD, and Kubernetes workflows while maintaining fast, research-friendly operations.

The role emphasizes threat modeling, incident response, and compliance across AI training data and creator data across both General Intuition and Medal ecosystems.