Data Security Engineer

Game Devs of Color Expo; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Game Devs of Color Expo seeks a security engineer to harden our cloud environments, protect data pipelines, and ensure safe deployment systems across research and product platforms.

You will implement secure-by-default guardrails, manage IAM and PKI, and coordinate threat modeling, drills, and incident response to reduce operational risk across our infrastructure.

Qualifications

• Hardening GCP/AWS-like environments and Kubernetes clusters.
• Implement secure-by-default guardrails in Terraform, CI/CD, and deployments.
• Protect data pipelines with encryption, isolation, logging, and observability.
• Manage privileged access, rotation, and least-privilege baselines.
• Secure the software supply chain with scanned builds and provenance.

Responsibilities

• Hardening cloud and container environments from the inside out.
• Protect data pipelines and ensure end-to-end observability of data movement.
• Own identity, access, secrets management, and PKI practices across cloud.
• Secure the software supply chain and hardened GitHub Actions runners.
• Run threat modeling, red-team drills, incident response, and pen-test coordination.
• Maintain compliance across creator data and AI training data.

Skills

GCP security

Kubernetes security

IAM discipline

Terraform

CI/CD security

Secure by default

Data pipeline security

PKI / secret management

Supply-chain security

Threat modeling

Incident response

Tools

Terraform

GitHub Actions

KMS / Secret Manager

Cloud IAM

Cloud Logging

SIEM

OpenTelemetry

Honeycomb

GitHub runners

Job description

The Role

This role secures the infrastructure bridging GI's AI research and Medal's creator platform. You will harden our cloud environments, protect our data pipelines, and ensure our deployment systems are safe from supply-chain attacks and other threats.

The Role

This role secures the infrastructure bridging GI's AI research and Medal's creator platform. You will harden our cloud environments, protect our data pipelines, and ensure our deployment systems are safe from supply-chain attacks and other threats.

You'll design secure-by-default foundations without slowing down research or product teams, blending off-the-shelf security tooling with custom guardrails where necessary. Your work directly reduces operational risk across both General Intuition and Medal.

What We're Looking For

• You harden GCP (AWS equivalents fine), Kubernetes, and containers from the inside out - workload isolation, network segmentation, IAM discipline, and secure-by-default guardrails baked into Terraform, CI/CD, and deployments.
• You protect the data pipelines - encrypting and isolating the video/metadata ETL, with full logging and observability (Cloud Logging, SIEM, OpenTelemetry, Honeycomb) into how AI training data moves and is used.
• You own identity, access, and secrets - privileged-access visibility, key rotation, least-privilege baselines, workload identity, and PKI (cloud-native KMS / Secret Manager).
• You secure the software supply chain - scanned builds and dependencies, artifact provenance, hardened GitHub Actions runners.
• You run the op-sec program - threat modeling, red-team and tabletop drills, incident response, and external pen-tests.
• You keep us compliant across creator data and AI training data.

Our Stack

Cloud: GCP (GKE, Cloud Run, Cloud SQL, GCS, Pub/Sub, BigQuery), Cloudflare + Akamai edge

• IaC & CI/CD: Terraform, GitHub Actions
• Identity & secrets: Cloud IAM, workload identity, KMS / Secret Manager
• Observability: Cloud Logging, SIEM, OpenTelemetry, Honeycomb