Data Security Engineer

Gamedevsofcolorexpo; New York (NY); On-site; USD 180,000 - 300,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

401(k)

Parental benefits

Generous PTO

Daily meals & wellness

Learning stipend

Job summary

Gamedevsofcolorexpo in New York is seeking a seasoned security engineer to bridge AI research infrastructure and Medal's creator platform. You will harden our cloud environments, protect our data pipelines, and ensure our deployment systems are safe from supply-chain attacks.

You’ll design secure-by-default foundations without slowing down research or product teams, blending off-the-shelf security tooling with custom guardrails where necessary.

Qualifications

• Harden GCP, Kubernetes, and containers with workload isolation and network segmentation.
• Maintain IAM discipline, guardrails in Terraform, CI/CD and deployments.
• Secure data pipelines with encryption, logging and observability.

Responsibilities

• Hardening cloud environments and protecting data pipelines across AI research and creator platform.
• Design secure-by-default foundations and integrate tooling with guardrails without slowing teams.
• Reduce operational risk across General Intuition and Medal.

Skills

GCP security

Kubernetes

Containers

IAM discipline

Terraform

CI/CD

Deployment security

Cloud security

Tools

GitHub Actions

KMS/Secret Manager

SIEM

Job description

$180K – $300K Offers Equity · The compensation may vary further depending on individualized factors for candidates, such as job-related knowledge, skills, experience, location, and other objective business considerations.

This role secures the infrastructure bridging GI's AI research and Medal's creator platform. You will harden our cloud environments, protect our data pipelines, and ensure our deployment systems are safe from supply-chain attacks and other threats.

You’ll design secure-by-default foundations without slowing down research or product teams, blending off-the-shelf security tooling with custom guardrails where necessary. Your work directly reduces operational risk across both General Intuition and Medal.

Benefits:

• Comprehensive medical, dental, vision coverage
• 401(k)
• fertility and parental benefits
• generous PTO
• daily meals, wellness & commuter benefits at our NYC HQ
• learning and development stipend
• Benefits vary by country and employment type

What We're Looking For

• You harden GCP (AWS equivalents fine), Kubernetes, and containers from the inside out - workload isolation, network segmentation, IAM discipline, and secure-by-default guardrails baked into Terraform, CI/CD, and deployments.
• You protect the data pipelines - encrypting and isolating the video/metadata ETL, with full logging and observability (Cloud Logging, SIEM, OpenTelemetry, Honeycomb) into how AI training data moves and is used.
• You own identity, access, and secrets - privileged-access visibility, key rotation, least-privilege baselines, workload identity, and PKI (cloud-native KMS / Secret Manager).
• You secure the software supply chain - scanned builds and dependencies, artifact provenance, hardened GitHub Actions runners.
• You run the op‑sec program - threat modeling, red‑team and tabletop drills, incident response, and external pen‑tests.
• You keep us compliant across creator data and AI training data.

Our Stack

Cloud: GCP (GKE, Cloud Run, Cloud SQL, GCS, Pub/Sub, BigQuery), Cloudflare + Akamai edge · IaC & CI/CD: Terraform, GitHub Actions · Identity & secrets: Cloud IAM, workload identity, KMS / Secret Manager · Observability: Cloud Logging, SIEM, OpenTelemetry, Honeycomb

Millions of gamers capture, share, and discover new games on Medal, the largest platform for gaming clips. Our mission is to design products that make sharing and connecting around gaming seamless and fun, and build a place where brands and game publishers can reach high-quality gamers to grow their products.