Medal

3 weeks ago

Data Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 20 hours agoStatus: Live

Job Summary

Secure the infrastructure that bridges AI research and a creator platform by hardening GCP environments and protecting deployment pipelines from supply-chain attacks. Build secure-by-default guardrails using Terraform, CI/CD, Kubernetes, and identity best practices. Own identity, access, and secrets, secure video/metadata ETL with logging and observability, run op-sec through threat modeling, red-team exercises, incident response, and external pen-tests, and support compliance for creator and AI training data.

Location: New York

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Harden cloud and deployment infrastructure across GCP, Kubernetes, and containers using secure-by-default guardrails.
•Protect and secure video/metadata data pipelines with encryption, logging, and observability into AI training data flows.
•Manage identity, access, and secrets including privileged-access visibility, key rotation, least-privilege baselines, workload identity, and PKI.
•Secure the software supply chain with scanned builds/dependencies, artifact provenance, and hardened CI/CD runners.
•Lead op-sec activities including threat modeling, red-team/tabletop drills, incident response, external pen-tests, and compliance support.

Pay and Benefits

Salary: USD 180,000 - 300,000 annually

Equity and Bonus:Equity

Key Requirements

•Harden GCP (AWS equivalents fine), Kubernetes, and containers with workload isolation, network segmentation, IAM discipline, and secure-by-default guardrails.
•Protect data pipelines by encrypting and isolating video/metadata ETL with full logging and observability.
•Own identity, access, and secrets, including key rotation, least-privilege baselines, workload identity, and cloud-native KMS/Secret Manager.
•Secure the software supply chain by scanning builds/dependencies, ensuring artifact provenance, and hardening GitHub Actions runners.
•Run op-sec via threat modeling, red-team/tabletop drills, incident response, and external pen-tests; support compliance across creator and AI training data.

Tech Stack:GCPGKECloud RunCloud SQLGCSPub/SubBigQueryCloudflareAkamaiTerraformGitHub ActionsKubernetesCloud IAMWorkload identityKMSSecret ManagerCloud LoggingSIEMOpenTelemetryHoneycomb

Company Brief

Medal

Medal (Medal.tv) provides a platform for gamers to capture, edit and share short-form game clips and highlights, and has expanded into contextual AI desktop assistants leveraging its capture technology.

Industry: Gaming

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Valuation: USD 250M to 500M

Headquarters: New York, United States

Founded: 2018

Glassdoor: 4.4

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Medal

3 weeks ago

Data Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 20 hours agoStatus: Live

Job Summary

Location: New York

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Harden cloud and deployment infrastructure across GCP, Kubernetes, and containers using secure-by-default guardrails.
•Protect and secure video/metadata data pipelines with encryption, logging, and observability into AI training data flows.
•Manage identity, access, and secrets including privileged-access visibility, key rotation, least-privilege baselines, workload identity, and PKI.
•Secure the software supply chain with scanned builds/dependencies, artifact provenance, and hardened CI/CD runners.
•Lead op-sec activities including threat modeling, red-team/tabletop drills, incident response, external pen-tests, and compliance support.

Pay and Benefits

Salary: USD 180,000 - 300,000 annually

Equity and Bonus:Equity

Key Requirements

•Harden GCP (AWS equivalents fine), Kubernetes, and containers with workload isolation, network segmentation, IAM discipline, and secure-by-default guardrails.
•Protect data pipelines by encrypting and isolating video/metadata ETL with full logging and observability.
•Own identity, access, and secrets, including key rotation, least-privilege baselines, workload identity, and cloud-native KMS/Secret Manager.
•Secure the software supply chain by scanning builds/dependencies, ensuring artifact provenance, and hardening GitHub Actions runners.
•Run op-sec via threat modeling, red-team/tabletop drills, incident response, and external pen-tests; support compliance across creator and AI training data.

Tech Stack:GCPGKECloud RunCloud SQLGCSPub/SubBigQueryCloudflareAkamaiTerraformGitHub ActionsKubernetesCloud IAMWorkload identityKMSSecret ManagerCloud LoggingSIEMOpenTelemetryHoneycomb

Company Brief

Medal

Industry: Gaming

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Valuation: USD 250M to 500M

Headquarters: New York, United States

Founded: 2018

Glassdoor: 4.4

Website LinkedIn Glassdoor