Senior Security & Infrastructure Engineer

Job description

# About Starbridge We're building the front door for how businesses partner with government in America. Public agencies spend roughly a trillion dollars a year with private companies, and nearly all of it still moves through infrastructure that hasn't changed in decades. Starbridge is building the full operating system for that relationship: the data, the signals, the workflows, and the rails that let a company find a public buyer, win the work, and get paid. We monitor 320,000+ public sector entities around the clock. 500+ customers have joined us since our launch in March. We've raised $50M from top investors including Craft and Michael Seibel of Y Combinator. ## About the role Your primary focus will be cloud security and hardening, vulnerability management, and the technical work behind our security and compliance program. You'll investigate findings, implement controls, drive remediation, and maintain evidence that demonstrates how our systems protect customer data. You'll also share responsibility for infrastructure and reliability with our engineering team. That includes improving deployments, troubleshooting production issues, and contributing code that makes our platform more secure and dependable. We're particularly interested in someone who enjoys tinkering with AI and building automations that make everyday work easier. Our stack includes AWS, GCP, Kubernetes/EKS, Terraform, PostgreSQL, and Redis. ## What you’ll do: **Your primary responsibilities** - **Cloud security and hardening.** Strengthen identity and access management, networking, encryption, secrets management, and container security across AWS and GCP. Implement improvements through infrastructure as code and automated checks. - **Vulnerability management.** Manage findings across applications, dependencies, containers, and cloud infrastructure. Coordinate penetration tests, assess exploitability and impact, prioritize remediation, and verify closure. Keep clear reporting on outstanding risks and deadlines. - **Technical compliance and customer trust.** Maintain control documentation, remediation plans, and audit evidence. Support assessments, continuous monitoring, and customer security reviews, including work related to FedRAMP. Translate requirements into practical engineering changes and repeatable procedures. **In partnership with engineering** - **Infrastructure and reliability.** Improve deployment pipelines, monitoring, alerting, backups, and recovery procedures. Help manage upgrades, investigate production incidents, and resolve recurring operational problems. - **Application security.** Contribute to architecture and code reviews, improve security checks in CI/CD, and help engineers address authentication, authorization, tenant isolation, and API security risks. - **Software and tooling.** Write automations, debug issues across services and background jobs, and contribute application fixes that improve security or stability. Support migrations and dependency upgrades where they intersect with this work. - **Detection and response.** Improve security logging and investigation workflows. Help maintain incident response procedures, investigate security events, and carry corrective actions through to completion. Across these areas, you'll look for opportunities to automate repetitive work, from vulnerability triage and evidence collection to deployment checks and troubleshooting. We encourage experimentation with AI tools and agents that can make these workflows more effective. ## **What you bring:** - **5+ years of relevant engineering experience** in security, infrastructure, platform engineering, or SRE, with meaningful responsibility for production security. - **Strong cloud infrastructure skills**, ideally across both AWS and GCP, and experience operating and securing Kubernetes, containers, IAM, networking, and storage. - **Practical vulnerability management experience**, including scanning, triage, remediation, and verification. - **Working knowledge of security and compliance practices**, including access controls, secure development, control implementation, and assessment evidence. - **Solid programming skills in any language.** You can read and debug application code, make targeted fixes, and build maintainable tools with meaningful tests. - **Experience with infrastructure as code and CI/CD**, using Terraform, Helm, Jenkins, or comparable tools. - **Clear communication and follow-through.** You can explain risk, prioritize competing issues, and carry changes from investigation through verification. - **Curiosity about AI and automation.** You enjoy experimenting, learning unfamiliar systems, and finding ways to reduce manual work. - **U.S. citizenship is required**, as this role will have privileged access to our FedRAMP environment. **Bonus if you have:** - Government security or regulated environments, including FedRAMP, CMMC, NIST 800-53, NIST 800-171, other NIST frameworks, or SOC 2. - Working with security providers, auditors, or third-party assessors. - Wiz, CrowdStrike, Vanta, or comparable security and vulnerability management tools. - Experience in PostgreSQL and Python backend development. - Container hardening and software supply chain security. - Securing AI applications, agents, and third-party integrations. **Interview Process** We move fast — really fast. Getting back to someone today beats tomorrow, and our interview process reflects that mindset. Please keep us posted on your timeline so we can move quickly and speed things up where needed. All interviews are conducted via Google Meet. After submitting your application, the team reviews your CV and statement of exceptional work. If your application passes this stage, you will be invited to a 30-minute interview during which a member of our team will make sure you're a good fit for the role. You will have the opportunity ask questions and learn more about the role as well. We'll then send you a programming challenge that consists of two parts: LeetCode and SQL. Beyond that step, you will enter the main process, which consists of three interviews: 1. System design exercise hands-on. 2. Live coding in Java/Kotlin. 3. Product thinking and past work. Our goal is to finish the process within one week. All interviews will be conducted via Google Meet. **How We Work** - **Build Bridges to Help Customers Win -** We pride ourselves on being obsessively customer-centric. - **Shooting Star Speed -** We move with extreme speed. We value momentum, decisiveness, and the ability to accelerate when it matters. - **Fun Is a Feature -** Fun is a Feature means we intentionally design Starbridge to be an energizing place to do hard work. Joy, humor, and camaraderie make great teams faster, sharper, and more resilient. - **In the Arena -** We believe the best ideas come from living close to the work, feeling the friction, hearing the nuance, and experiencing the details firsthand. **Benefits include:** - Competitive salary + early-stage equity - Comprehensive medical, dental, and vision insurance - Company provided Lunch in office everyday - Complimentary gym (Chelsea Piers Fitness) membership - Unlimited PTO - Regular offsites (NYC + global locations)