Data Security Engineer

General Intuition; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

General Intuition seeks a security-focused engineer to harden cloud and deployment environments, protecting data pipelines and ensuring secure-by-default configurations. You will own identity and secret management, secure software supply chains, and lead threat modeling and incident response initiatives.

Responsibilities include safeguarding IaC, CI/CD, and deployment processes while maintaining compliance across creator and AI training data.

Qualifications

• Harden cloud infrastructure focusing on secure-by-default configurations.
• Experience with GCP, container security, and workload isolation.
• Strong knowledge of IAM, key rotation, and secret management.
• Familiarity with CI/CD security, SBOMs, and software supply chain.
• Ability to perform threat modeling and incident response planning.

Responsibilities

• Hardening GCP and Kubernetes environments with secure-by-default guardrails.
• Protect data pipelines and ensure complete logging and observability.
• Own identity, access, and secrets management across platforms.
• Secure the software supply chain and hardened CI/CD runners.
• Lead threat modeling exercises, red-team drills, and incident response.
• Maintain compliance across creator data and AI training data.

Skills

GCP security

Kubernetes

Terraform

CI/CD

IAM discipline

Secure-by-default

Threat modeling

Incident response

Tools

GitHub Actions

Cloud IAM

KMS / Secret Manager

SIEM

OpenTelemetry

Job description

About General Intuition

General Intuition is the frontier lab for acting in space and time. We build large action models and world models that can perceive, predict, and act across virtual and physical environments. General Intuition builds on the strength of Medal, the world's largest and fastest-growing platform for gaming clips, where millions of gamers capture, share, and discover new games every year. We recently raised $320M at a $2.3B valuation led by Khosla Ventures with participation from General Catalyst, Eric Schmidt, and Jeff Bezos, to discover the next generation of real-world intelligence.

The Role

This role secures the infrastructure bridging GI's AI research and Medal's creator platform. You will harden our cloud environments, protect our data pipelines, and ensure our deployment systems are safe from supply-chain attacks and other threats.

You'll design secure-by-default foundations without slowing down research or product teams, blending off-the-shelf security tooling with custom guardrails where necessary. Your work directly reduces operational risk across both General Intuition and Medal.

What We're Looking For

• You harden GCP (AWS equivalents fine), Kubernetes, and containers from the inside out - workload isolation, network segmentation, IAM discipline, and secure-by-default guardrails baked into Terraform, CI/CD, and deployments.
• You protect the data pipelines - encrypting and isolating the video/metadata ETL, with full logging and observability (Cloud Logging, SIEM, OpenTelemetry, Honeycomb) into how AI training data moves and is used.
• You own identity, access, and secrets - privileged-access visibility, key rotation, least-privilege baselines, workload identity, and PKI (cloud-native KMS / Secret Manager).
• You secure the software supply chain - scanned builds and dependencies, artifact provenance, hardened GitHub Actions runners.
• You run the op-sec program - threat modeling, red-team and tabletop drills, incident response, and external pen-tests.
• You keep us compliant across creator data and AI training data.

Our Stack

Cloud: GCP (GKE, Cloud Run, Cloud SQL, GCS, Pub/Sub, BigQuery), Cloudflare + Akamai edge · IaC & CI/CD: Terraform, GitHub Actions · Identity & secrets: Cloud IAM, workload identity, KMS / Secret Manager · Observability: Cloud Logging, SIEM, OpenTelemetry, Honeycomb