Senior Security & Infrastructure Engineer

Starbridge•New York, NY

5d•$200,000 - $300,000

About The Position

Starbridge is hiring a Senior Security & Infrastructure Engineer to lead cloud security and hardening, vulnerability management, and technical work supporting its security and compliance program. The role investigates security findings, implements controls, drives remediation, and maintains evidence demonstrating protection of customer data. It also shares responsibility for infrastructure and reliability with the engineering team, including deployment improvements, production troubleshooting, and code contributions that make the platform more secure and dependable. Starbridge encourages experimentation with AI tools and agents to automate routine work. The technology stack includes AWS, GCP, Kubernetes/EKS, Terraform, PostgreSQL, and Redis. U.S. citizenship is required because the role will have privileged access to the FedRAMP environment.

Requirements

At least 5 years of relevant engineering experience in security, infrastructure, platform engineering, or SRE, with meaningful responsibility for production security.
Strong cloud infrastructure skills, ideally across AWS and GCP, and experience operating and securing Kubernetes, containers, IAM, networking, and storage.
Practical vulnerability management experience, including scanning, triage, remediation, and verification.
Working knowledge of security and compliance practices, including access controls, secure development, control implementation, and assessment evidence.
Solid programming skills in any language; ability to read and debug application code, make targeted fixes, and build maintainable tools with meaningful tests.
Experience with infrastructure as code and CI/CD using Terraform, Helm, Jenkins, or comparable tools.
Clear communication and follow-through, including the ability to explain risk, prioritize competing issues, and carry changes from investigation through verification.
Curiosity about AI and automation, willingness to experiment and learn unfamiliar systems, and interest in reducing manual work.
U.S. citizenship is required because the role has privileged access to the FedRAMP environment.

Nice To Haves

Experience in government security or regulated environments, including FedRAMP, CMMC, NIST 800-53, NIST 800-171, other NIST frameworks, or SOC 2.
Experience working with security providers, auditors, or third-party assessors.
Experience with Wiz, CrowdStrike, Vanta, or comparable security and vulnerability management tools.
Experience in PostgreSQL and Python backend development.
Experience with container hardening and software supply chain security.
Experience securing AI applications, agents, and third-party integrations.

Responsibilities

Strengthen identity and access management, networking, encryption, secrets management, and container security across AWS and GCP using infrastructure as code and automated checks.
Manage vulnerability findings across applications, dependencies, containers, and cloud infrastructure; coordinate penetration tests, assess exploitability and impact, prioritize remediation, verify closure, and report outstanding risks and deadlines.
Maintain control documentation, remediation plans, and audit evidence; support assessments, continuous monitoring, customer security reviews, and work related to FedRAMP.
Translate security and compliance requirements into practical engineering changes and repeatable procedures.
Improve deployment pipelines, monitoring, alerting, backups, and recovery procedures; help manage upgrades, investigate production incidents, and resolve recurring operational problems.
Contribute to architecture and code reviews, improve security checks in CI/CD, and help engineers address authentication, authorization, tenant isolation, and API security risks.
Write automations, debug issues across services and background jobs, and contribute application fixes that improve security or stability; support related migrations and dependency upgrades.
Improve security logging and investigation workflows, maintain incident response procedures, investigate security events, and carry corrective actions through to completion.
Find opportunities to automate repetitive work, including vulnerability triage, evidence collection, deployment checks, and troubleshooting; experiment with AI tools and agents to improve workflows.