Senior Security & Infrastructure Engineer

The role

This person will focus on cloud security, hardening, vulnerability management, and technical compliance work. They will also share responsibility for infrastructure and reliability with the engineering team.

What you will do

• Strengthen identity and access management, networking, encryption, secrets management, and container security across AWS and GCP.
• Implement improvements through infrastructure as code and automated checks.
• Manage findings across applications, dependencies, containers, and cloud infrastructure.
• Coordinate penetration tests, assess exploitability and impact, prioritize remediation, and verify closure.
• Maintain control documentation, remediation plans, and audit evidence.
• Support assessments, continuous monitoring, and customer security reviews, including work related to FedRAMP.
• Improve deployment pipelines, monitoring, alerting, backups, and recovery procedures.
• Help manage upgrades, investigate production incidents, and resolve recurring operational problems.
• Contribute to architecture and code reviews and improve security checks in CI/CD.
• Write automations, debug issues across services and background jobs, and contribute application fixes.

Required qualifications

• 5+ years of relevant engineering experience in security, infrastructure, platform engineering, or SRE, with meaningful responsibility for production security.
• Strong cloud infrastructure skills, ideally across both AWS and GCP, and experience operating and securing Kubernetes, containers, IAM, networking, and storage.
• Practical vulnerability management experience, including scanning, triage, remediation, and verification.
• Working knowledge of security and compliance practices, including access controls, secure development, control implementation, and assessment evidence.
• Solid programming skills in any language.
• Experience with infrastructure as code and CI/CD, using Terraform, Helm, Jenkins, or comparable tools.
• Clear communication and follow-through.
• Curiosity about AI and automation.
• U.S. citizenship is required

Nice to have

• Government security or regulated environments, including FedRAMP, CMMC, NIST 800-53, NIST 800-171, other NIST frameworks, or SOC 2.
• Working with security providers, auditors, or third-party assessors.
• Wiz, CrowdStrike, Vanta, or comparable security and vulnerability management tools.
• Experience in PostgreSQL and Python backend development.
• Container hardening and software supply chain security.
• Securing AI applications, agents, and third-party integrations.

Benefits

• Competitive salary + early-stage equity
• Comprehensive medical, dental, and vision insurance
• Company provided Lunch in office everyday
• Complimentary gym (Chelsea Piers Fitness) membership
• Unlimited PTO
• Regular offsites (NYC + global locations)

Before you apply

• U.S. citizenship is required
• The team reviews your CV and statement of exceptional work
• A 30-minute interview to ensure fit
• A programming challenge consisting of LeetCode and SQL
• Three main interviews: System design exercise, Live coding in Java/Kotlin, and Product thinking and past work

About the company

Starbridge is building the full operating system for how businesses partner with government in America. They monitor 320,000+ public sector entities and have raised $50M from investors including Craft and Michael Seibel of Y Combinator.