About Starbridge

We're building the front door for how businesses partner with government in America.

Public agencies spend roughly a trillion dollars a year with private companies, and nearly all of it still moves through infrastructure that hasn't changed in decades. Starbridge is building the full operating system for that relationship: the data, the signals, the workflows, and the rails that let a company find a public buyer, win the work, and get paid.

We monitor 320,000+ public sector entities around the clock. 500+ customers have joined us since our launch in March. We've raised $50M from top investors including Craft and Michael Seibel of Y Combinator.

About the role

Your primary focus will be cloud security and hardening, vulnerability management, and the technical work behind our security and compliance program. You'll investigate findings, implement controls, drive remediation, and maintain evidence that demonstrates how our systems protect customer data.

You'll also share responsibility for infrastructure and reliability with our engineering team. That includes improving deployments, troubleshooting production issues, and contributing code that makes our platform more secure and dependable.

We're particularly interested in someone who enjoys tinkering with AI and building automations that make everyday work easier.

Our stack includes AWS, GCP, Kubernetes/EKS, Terraform, PostgreSQL, and Redis.

What you’ll do

Your primary responsibilities

Cloud security and hardening. Strengthen identity and access management, networking, encryption, secrets management, and container security across AWS and GCP. Implement improvements through infrastructure as code and automated checks.

Vulnerability management. Manage findings across applications, dependencies, containers, and cloud infrastructure. Coordinate penetration tests, assess exploitability and impact, prioritize remediation, and verify closure. Keep clear reporting on outstanding risks and deadlines.

Technical compliance and customer trust. Maintain control documentation, remediation plans, and audit evidence. Support assessments, continuous monitoring, and customer security reviews, including work related to FedRAMP. Translate requirements into practical engineering changes and repeatable procedures.

In partnership with engineering

Infrastructure and reliability. Improve deployment pipelines, monitoring, alerting, backups, and recovery procedures. Help manage upgrades, investigate production incidents, and resolve recurring operational problems.

Application security. Contribute to architecture and code reviews, improve security checks in CI/CD, and help engineers address authentication, authorization, tenant isolation, and API security risks.

Software and tooling. Write automations, debug issues across services and background jobs, and contribute application fixes that improve security or stability. Support migrations and dependency upgrades where they intersect with this work.

Detection and response. Improve security logging and investigation workflows. Help maintain incident response procedures, investigate security events, and carry corrective actions through to completion.

Across these areas, you'll look for opportunities to automate repetitive work, from vulnerability triage and evidence collection to deployment checks and troubleshooting. We encourage experimentation with AI tools and agents that can make these workflows more effective.

What you bring

5+ years of relevant engineering experience in security, infrastructure, platform engineering, or SRE, with meaningful responsibility for production security.

Strong cloud infrastructure skills, ideally across both AWS and GCP, and experience operating and securing Kubernetes, containers, IAM, networking, and storage.

Practical vulnerability management experience, including scanning, triage, remediation, and verification.

Working knowledge of security and compliance practices, including access controls, secure development, control implementation, and assessment evidence.