Data Security Engineer
Summary
Data Security Engineer at General Intuition in New York City: harden cloud environments (GCP/AWS, Kubernetes, containers), secure CI/CD and video/metadata ETL pipelines against supply-chain attacks, manage identity, secrets and PKI, run incident response and pen tests, and maintain compliance for creator and AI training data.
You will harden cloud environments, protect data pipelines, and secure deployment systems against supply-chain attacks and other threats. You will build secure-by-default infrastructure, manage identity and secrets, run operational security programs, and support compliance for creator and AI training data.
Responsibilities
- Harden cloud environments, Kubernetes, and containers
- Build secure-by-default guardrails in Terraform, CI/CD, and deployments
- Protect and isolate video and metadata ETL pipelines
- Implement logging and observability for AI training data
- Manage identity, privileged access, secrets, key rotation, workload identity, and PKI
- Secure builds, dependencies, artifact provenance, and GitHub Actions runners
- Run threat modeling, red-team and tabletop drills, incident response, and external penetration tests
- Maintain compliance for creator and AI training data
Requirements
- Experience securing GCP or AWS environments, Kubernetes, and containers
- Knowledge of workload isolation, network segmentation, IAM, and infrastructure as code
- Experience with CI/CD security and software supply-chain security
- Knowledge of Cloud Logging, SIEM, OpenTelemetry, or Honeycomb
- Knowledge of KMS or Secret Manager
- Experience with threat modeling, incident response, and penetration testing
Benefits
- Comprehensive medical coverage
- Dental coverage
- Vision coverage
- 401(k)
- Fertility benefits
- Parental benefits
- Generous PTO
- Daily meals at the NYC HQ
- Wellness benefits
- Commuter benefits at the NYC HQ
- Learning and development stipend