Security Engineer

The DATA Foundation; Palo Alto, Northern (CA, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

PIP Labs, an R&D unit in the DATA Network, seeks a hands-on Security Engineer to own security across our cloud, endpoints and internal systems, while supporting Poseidon and related entities. You will balance operations with automation to scale in a globally distributed environment.

You’ll manage AWS security (IAM, logging, monitoring), endpoint protection (CrowdStrike, Jamf), incident response and playbook development.

Qualifications

• Proven experience in cloud security and secure cloud architectures.
• Strong practical knowledge of AWS security, IAM, logging and monitoring.
• Experience operating endpoint protection with CrowdStrike and Jamf.
• Track record automating operational security workflows via scripting or APIs.
• Comfort handling both security engineering and hands-on IT responsibilities.
• Excellent written and spoken English with clear communication.
• Proactive, low-ego approach and willingness to drive cross‑team fixes.

Responsibilities

• Own day-to-day security operations across cloud, endpoints and internal systems.
• Secure and administer AWS environment, with improvement of posture and controls.
• Manage endpoint security and device controls using CrowdStrike and Jamf.
• Automate recurring security and IT workflows for scale across entities.
• Collaborate with infrastructure and engineering to implement fixes and runbooks.
• Own dependency hygiene and software supply chain security.

Skills

Cloud security

AWS IAM

Logging & monitoring

Automation scripting

Security orchestration

Communication

English proficiency

Tools

CrowdStrike

Jamf

Job description

PIP Labs is an R&D company contributing to the development of the DATA Network, open infrastructure that enables real human data to be sourced, proven and processed for AI training. The network is stewarded by the DATA Foundation, which supports its long-term development, integrity and permissionless nature. The Foundation also maintains Trace, the network’s public audit layer, where the provenance, consent, licensing and payment history associated with data records can be verified.

We are looking for a hands-on Security Engineer to own and strengthen security across PIP Labs’ cloud environment, endpoints and internal systems, while also supporting related companies, including Poseidon, across the broader ecosystem. You will balance day-to-day security operations with the automation required to manage a growing, globally distributed environment effectively.

This is a practical ownership role for someone who communicates clearly, moves quickly and is comfortable getting into the details. You will investigate alerts, improve controls, support employees and engineers, and implement fixes directly. As the ecosystem works with increasingly valuable real-world data, you will also help strengthen how that data, and the systems surrounding it, are accessed and protected.

What you’ll do

• Own day-to-day security operations across PIP Labs and related companies, including monitoring, alert triage, incident response and remediation.

• Secure and administer our AWS environment, with some exposure to Google Cloud, and continuously improve our cloud security posture.

• Manage endpoint security and device controls using tools such as CrowdStrike and Jamf.

• Automate recurring security and IT workflows so that controls can scale across multiple companies without unnecessary manual work.

• Partner with infrastructure and engineering teams to identify risks, improve configurations and ship practical fixes, including contributing code or pull requests where appropriate.

• Own dependency hygiene and software supply chain security, ensuring third-party code is appropriately vetted, pinned and continuously monitored for compromise.

• Support identity, access, device and other internal IT security needs for a globally distributed team.

• Develop and maintain clear security procedures, playbooks and documentation.

• Help assess and strengthen how sensitive and valuable real-world datasets are ingested, stored, accessed and protected across the DATA Network ecosystem.

• Contribute to security readiness in a high-threat environment, including protection against targeted account compromise, credential theft and sophisticated social-engineering attempts.

What we’re looking for

• Professional experience in cloud security, IT security, security engineering or a closely related role.

• Strong practical knowledge of AWS security, including identity and access management, logging, monitoring and secure configuration.

• Experience operating endpoint detection and response and device-management tooling. Experience with CrowdStrike and Jamf is strongly preferred.

• A track record of automating operational workflows through scripting, APIs, infrastructure tooling, agents or security orchestration.

• Comfort handling both security engineering and hands‑on internal IT responsibilities.

• A proactive, low‑ego approach. You identify gaps, propose solutions and follow work through to completion.

• Excellent written and spoken English, with the ability to communicate clearly across technical and non-technical teams.

• Sound judgment under pressure and a practical approach to balancing security, speed and usability.

Nice to have

• Experience securing data platforms, ingestion pipelines or environments that hold high-value datasets.

• Familiarity with Google Cloud or Google Workspace administration and security.

• Experience working in Web3, blockchain or another environment exposed to persistent, sophisticated threat actors.

• Experience supporting multiple business entities, business units or portfolio companies through a shared security function.

What success looks like

• Security coverage remains reliable and responsive across cloud environments, endpoints and employee systems.

• High-priority risks and alerts are investigated quickly, communicated clearly and driven through remediation.

• Manual work decreases as repeatable security and IT workflows become automated.

• Infrastructure and engineering teams have a trusted, hands‑on security partner who helps them ship safely.