Senior Security & Infrastructure Engineer

📋 Job Overview

Your primary focus will be cloud security and hardening, vulnerability management, and the technical work behind our security and compliance program. You'll investigate findings, implement controls, drive remediation, and maintain evidence that demonstrates how our systems protect customer data. You'll also share responsibility for infrastructure and reliability with our engineering team. That includes improving deployments, troubleshooting production issues, and contributing code that makes our platform more secure and dependable. We're particularly interested in someone who enjoys tinkering with AI and building automations that make everyday work easier. Our stack includes AWS, GCP, Kubernetes/EKS, Terraform, PostgreSQL, and Redis.

🏢 About Starbridge

We're building the front door for how businesses partner with government in America. Public agencies spend roughly a trillion dollars a year with private companies, and nearly all of it still moves through infrastructure that hasn't changed in decades. Starbridge is building the full operating system for that relationship: the data, the signals, the workflows, and the rails that let a company find a public buyer, win the work, and get paid. We monitor 320,000+ public sector entities around the clock. 500+ customers have joined us since our launch in March. We've raised $50M from top investors including Craft and Michael Seibel of Y Combinator.

🎯 The Role

Your primary focus will be cloud security and hardening, vulnerability management, and the technical work behind our security and compliance program. You'll investigate findings, implement controls, drive remediation, and maintain evidence that demonstrates how our systems protect customer data. You'll also share responsibility for infrastructure and reliability with our engineering team. That includes improving deployments, troubleshooting production issues, and contributing code that makes our platform more secure and dependable. We're particularly interested in someone who enjoys tinkering with AI and building automations that make everyday work easier.

✅ Key Responsibilities

• Cloud security and hardening. Strengthen identity and access management, networking, encryption, secrets management, and container security across AWS and GCP. Implement improvements through infrastructure as code and automated checks.
• Vulnerability management. Manage findings across applications, dependencies, containers, and cloud infrastructure. Coordinate penetration tests, assess exploitability and impact, prioritize remediation, and verify closure. Keep clear reporting on outstanding risks and deadlines.
• Technical compliance and customer trust. Maintain control documentation, remediation plans, and audit evidence. Support assessments, continuous monitoring, and customer security reviews, including work related to FedRAMP. Translate requirements into practical engineering changes and repeatable procedures.
• In partnership with engineering
• Infrastructure and reliability. Improve deployment pipelines, monitoring, alerting, backups, and recovery procedures. Help manage upgrades, investigate production incidents, and resolve recurring operational problems.
• Application security. Contribute to architecture and code reviews, improve security checks in CI/CD, and help engineers address authentication, authorization, tenant isolation, and API security risks.
• Software and tooling. Write automations, debug issues across services and background jobs, and contribute application fixes that improve security or stability. Support migrations and dependency upgrades where they intersect with this work.
• Detection and response. Improve security logging and investigation workflows. Help maintain incident response procedures, investigate security events, and carry corrective actions through to completion.
• Across these areas, you'll look for opportunities to automate repetitive work, from vulnerability triage and evidence collection to deployment checks and troubleshooting. We encourage experimentation with AI tools and agents that can make these workflows more effective.

📌 Required Qualifications

• 5+ years of relevant engineering experience in security, infrastructure, platform engineering, or SRE, with meaningful responsibility for production security.
• Strong cloud infrastructure skills, ideally across both AWS and GCP, and experience operating and securing Kubernetes, containers, IAM, networking, and storage.
• Practical vulnerability management experience, including scanning, triage, remediation, and verification.
• Working knowledge of security and compliance practices, including access controls, secure development, control implementation, and assessment evidence.
• Solid programming skills in any language. You can read and debug application code, make targeted fixes, and build maintainable tools with meaningful tests.
• Experience with infrastructure as code and CI/CD, using Terraform, Helm, Jenkins, or comparable tools.
• Clear communication and follow-through. You can explain risk, prioritize competing issues, and carry changes from investigation through verification.
• Curiosity about AI and automation. You enjoy experimenting, learning unfamiliar systems, and finding ways to reduce manual work.
• U.S. citizenship is required, as this role will have privileged access to our FedRAMP environment.

⭐ Desirable Experience

• Government security or regulated environments, including FedRAMP, CMMC, NIST 800-53, NIST 800-171, other NIST frameworks, or SOC 2.
• Working with security providers, auditors, or third-party assessors.
• Wiz, CrowdStrike, Vanta, or comparable security and vulnerability management tools.
• Experience in PostgreSQL and Python backend development.
• Container hardening and software supply chain security.
• Securing AI applications, agents, and third-party integrations.

🎁 Benefits

Compensation: $200K – $300K • Offers Equity

🛂 Visa & Eligibility

U.S. citizenship is required, as this role will have privileged access to our FedRAMP environment.