About this opportunity
General Intuition & Medal lists this Data Security Engineer opportunity in new york, New York. Review the employer’s description below for duties, qualifications and application requirements.
Job description
The Company
General Intuition
We are the frontier research lab dedicated to building foundation models for environments that require deep spatial and temporal reasoning. For the past year, we've been pushing the forefront of AI across agents capable of navigating space and time, world models that provide training environments for those agents, and video understanding models with a focus on transfer to the real world.
We raised a seed round of $133M from General Catalyst and Khosla to build the leading AI lab for embodied agents.
The Role
General Intuition and it's sister company Medal operate at the intersection of large-scale gaming data, AI research, and high-velocity product engineering. This role secures the infrastructure that bridges these worlds. You will harden our cloud environments, protect our data pipelines, and ensure our deployment systems are safe from supply-chain attacks and other threats.
You’ll design secure-by-default foundations without slowing down research or product teams, blending off-the-shelf security tooling with custom guardrails where necessary. Your work directly reduces operational risk across both General Intuition and Medal, and ensures we maintain trust as we scale sensitive AI workflows and massive creator-driven platforms.
Key Responsibilities
Infrastructure & Cloud Hardening
Reduce the attack surface of GCP workloads, Kubernetes clusters, and on-prem systems through hardened defaults, workload isolation, and IAM discipline.
Build automated security guardrails directly into Terraform, CI/CD, and Kubernetes deployments.
Maintain comprehensive observability and auditability across all infrastructure components.
Data Pipeline Protection
Harden ingestion and ETL systems used for video and metadata processing
Enforce encryption standards, strict IAM scopes, audit logging, and boundary isolation between pipelines and production systems.
Ensure complete visibility into the transfer and use of AI training data.
Identity, Access, and Secrets Governance
Build visibility into privileged access and access drift across engineering.
Automate key rotation, scoped roles, certificate workflows, and least-privilege baselines.
Maintain a full audit of secrets and enforce secure handling across endpoints, services, and pipelines.
Deployment Pipeline & Supply Chain Security
Protect build systems against supply-chain attacks.
Ensure all builds and dependencies are scanned and recorded with a verifiable audit trail.
Strengthen GitHub Actions runners, workload identities, and artifact provenance.
Operational Security & Compliance
Develop and run drills, tabletop exercises, and incident-response workflows.
Coordinate and validate external penetration tests.
Conduct internal red-team tests and support threat modeling with engineering.
Ensure we meet compliance requirements relevant to both creator data and AI training data.
Qualifications
Core Technical Skills
Strong experience with cloud infrastructure (especially GCP), Terraform, Kubernetes, containers, and modern CI/CD processes.
Deep security fundamentals: IAM design, network segmentation, least privilege, secure-by-default patterns, and threat modeling.
Hands-on experience with GCP/AWS security stacks (IAM, VPC SC, KMS, workload identity, Secrets Manager).
Familiarity with infrastructure observability and logging systems (Prometheus, Grafana, Cloud Logging, SIEM).
Strong secrets management and PKI experience (Vault or cloud-native equivalents).
Security Expertise
Experience implementing or operating red-team / purple-team exercises.
Understanding of secure coding practices and modern software supply-chain risks.
Practical experience defending high-velocity environments with complex CI/CD workflows.
Preferred Background
Security Engineer / DevOps hybrid roles at fast-growing mid-stage startups.
SREs with a heavy security focus.
DevOps engineers who became de‑facto security leads in high-growth companies.
Backgrounds from organizations with strong infra or security discipline.
Benefits
Competitive salary and meaningful equity
Comprehensive medical, dental, and vision coverage
401(k)
Wellness and fitness perks including a Wellhub membership and mental health resources
Paid parental leave, fertility and maternal health benefits
Generous PTO policy
Daily meals and commuter benefits at our NYC HQ in Flatiron
Learning and development stipend
Benefits vary by country and employment type.
#J-18808-Ljbffr
Worksite address
new york, NY, 10261, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.