--- title: Senior Security & Infrastructure Engineer description: Starbridge Labs is hiring for the Senior Security & Infrastructure Engineer role in New York, NY. See the full description and apply. type: job url: https://www.foundrole.com/jobs/senior-security-and-infrastructure-engineer-at-starbridge-labs-01a145b4-48aa-7dd0-837e-050c2c0e84e4 date: 2026-11-15T01:26:44Z og_description: Join Starbridge Labs as Senior Security & Infrastructure Engineer in New York, NY. Pays $200K–$300K per year. Full-time, on-site role. og_image: https://www.foundrole.com/og/biauzp.png breadcrumbs: - label: Home url: https://www.foundrole.com/ - label: Search url: https://www.foundrole.com/jobs --- | | | |---|---| | **Company** | Starbridge Labs | | **Location** | New York, NY | | **Salary** | $200K/yr - $300K/yr | | **Type** | Full Time | | **Posted** | Oct 16, 2026 | ## Is this job real? **Ghost job check:** A · Low risk. Probably a real opening. ## Visa sponsorship - **H-1B:** Starbridge Labs sponsors H-1B visas. It filed 3 H-1B petitions (FY2026 Q1 – FY2026 Q4). - **E-Verify:** No E-Verify enrollment on record for Starbridge Labs. ## Pay for similar jobs Most similar jobs pay $196,000 – $260,000 a year (median $238,000). ## Description # About Starbridge We're building the front door for how businesses partner with government in America. Public agencies spend roughly a trillion dollars a year with private companies, and nearly all of it still moves through infrastructure that hasn't changed in decades. Starbridge is building the full operating system for that relationship: the data, the signals, the workflows, and the rails that let a company find a public buyer, win the work, and get paid. We monitor 320,000+ public sector entities around the clock. 500+ customers have joined us since our launch in March. We've raised $50M from top investors including Craft and Michael Seibel of Y Combinator. ## About the role Your primary focus will be cloud security and hardening, vulnerability management, and the technical work behind our security and compliance program. You'll investigate findings, implement controls, drive remediation, and maintain evidence that demonstrates how our systems protect customer data. You'll also share responsibility for infrastructure and reliability with our engineering team. That includes improving deployments, troubleshooting production issues, and contributing code that makes our platform more secure and dependable. We're particularly interested in someone who enjoys tinkering with AI and building automations that make everyday work easier. Our stack includes AWS, GCP, Kubernetes/EKS, Terraform, PostgreSQL, and Redis. ## What you’ll do: **Your primary responsibilities** - **Cloud security and hardening.** Strengthen identity and access management, networking, encryption, secrets management, and container security across AWS and GCP. Implement improvements through infrastructure as code and automated checks. - **Vulnerability management.** Manage findings across applications, dependencies, containers, and cloud infrastructure. Coordinate penetration tests, assess exploitability and impact, prioritize remediation, and verify closure. Keep clear reporting on outstanding risks and deadlines. - **Technical compliance and customer trust.** Maintain control documentation, remediation plans, and audit evidence. Support assessments, continuous monitoring, and customer security reviews, including work related to FedRAMP. Translate requirements into practical engineering changes and repeatable procedures. **In partnership with engineering** - **Infrastructure and reliability.** Improve deployment pipelines, monitoring, alerting, backups, and recovery procedures. Help manage upgrades, investigate production incidents, and resolve recurring operational problems. - **Application security.** Contribute to architecture and code reviews, improve security checks in CI/CD, and help engineers address authentication, authorization, tenant isolation, and API security risks. - **Software and tooling.** Write automations, debug issues across services and background jobs, and contribute application fixes that improve security or stability. Support migrations and dependency upgrades where they intersect with this work. - **Detection and response.** Improve security logging and investigation workflows. Help maintain incident response procedures, investigate security events, and carry corrective actions through to completion. Across these areas, you'll look for opportunities to automate repetitive work, from vulnerability triage and evidence collection to deployment checks and troubleshooting. We encourage experimentation with AI tools and agents that can make these workflows more effective. ## **What you bring:** - **5+ years of relevant engineering experience** in security, infrastructure, platform engineering, or SRE, with meaningful responsibility for production security. - **Strong cloud infrastructure skills**, ideally across both AWS and GCP, and experience operating and securing Kubernetes, containers, IAM, networking, and storage. - **Practical vulnerability management experience**, including scanning, triage, remediation, and verification. - **Working knowledge of security and compliance practices**, including access controls, secure development, control implementation, and assessment evidence. - **Solid programming skills in any language.** You can read and debug application code, make targeted fixes, and build maintainable tools with meaningful tests. - **Experience with infrastructure as code and CI/CD**, using Terraform, Helm, Jenkins, or comparable tools. - **Clear communication and follow-through.** You can explain risk, prioritize competing issues, and carry changes from investigation through verification. - **Curiosity about AI and automation.** You enjoy experimenting, learning unfamiliar systems, and finding ways to reduce manual work. - **U.S. citizenship is required**, as this role will have privileged access to our FedRAMP environment. **Bonus if you have:** - Government security or regulated environments, including FedRAMP, CMMC, NIST 800-53, NIST 800-171, other NIST frameworks, or SOC 2. - Working with security providers, auditors, or third-party assessors. - Wiz, CrowdStrike, Vanta, or comparable security and vulnerability management tools. - Experience in PostgreSQL and Python backend development. - Container hardening and software supply chain security. - Securing AI applications, agents, and third-party integrations. **Interview Process** We move fast — really fast. Getting back to someone today beats tomorrow, and our interview process reflects that mindset. Please keep us posted on your timeline so we can move quickly and speed things up where needed. All interviews are conducted via Google Meet. After submitting your application, the team reviews your CV and statement of exceptional work. If your application passes this stage, you’ll be invited to a 20-minute intro call to make sure there’s a good fit and to answer your questions about the role. From there, the process consists of: 1. Python interview and System design - practical coding and a hands-on design exercise. 2. Security-focused case study. 3. Product interview - how you think about the product and your past work. Our goal is to finish the process within one week. All interviews will be conducted via Google Meet. **How We Work** - **Build Bridges to Help Customers Win -** We pride ourselves on being obsessively customer-centric. - **Shooting Star Speed -** We move with extreme speed. We value momentum, decisiveness, and the ability to accelerate when it matters. - **Fun Is a Feature -** Fun is a Feature means we intentionally design Starbridge to be an energizing place to do hard work. Joy, humor, and camaraderie make great teams faster, sharper, and more resilient. - **In the Arena -** We believe the best ideas come from living close to the work, feeling the friction, hearing the nuance, and experiencing the details firsthand. **Benefits include:** - Competitive salary + early-stage equity - Comprehensive medical, dental, and vision insurance - Company provided Lunch in office everyday - Complimentary gym (Chelsea Piers Fitness) membership - Unlimited PTO - Regular offsites (NYC + global locations) ## Skills - Site Reliability Engineering (Sre) - Supply Chain Security - CrowdStrike - Jenkins - API Security - Helm (Kubernetes) - Debugging - Amazon Web Services - Wiz - Application Security - Background Processing - SOC 2 Compliance - Infrastructure as Code (IaC) - Hardening - Triage - Investigation - Access Controls - Encryption - Data Backup - Code Review - Logging - Python - Authentication (Software Security) - Audit Evidence - Automation - Artificial Intelligence - PostgreSQL - Secrets Management - Terraform - Privileged Access Management - FedRAMP Compliance - Kubernetes - CI/CD - Incident Response - CI/CD Pipelines - Vanta - Corrective And Preventive Action (Capa) - Identity And Access Management - Google Cloud Platform (Gcp) - Cloud Infrastructure - Engineering Change Management - Tenant Isolation - Container Security - Platform Engineering - Back End (Software Engineering) - Continuous Monitoring - Security Review - Cloud Security and Compliance - Cybersecurity Maturity Model Certification (Cmmc) - Vulnerability Management - Communication - Threat Detection ## Benefits - Health Insurance - Dental Insurance - Vision Insurance - Paid Time Off (Pto) ## Related - [Technology & Software jobs](https://www.foundrole.com/careers/technology-and-software?utm_source=ai_markdown)- [Cybersecurity jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity?utm_source=ai_markdown)- [Security Engineer jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity/security-engineer?utm_source=ai_markdown)- [Browse all companies](https://www.foundrole.com/companies?utm_source=ai_markdown) ## Explore this job market - [New York](https://www.foundrole.com/locations/us/new-york?utm_source=ai_markdown) — 150107 jobs - [New York, NY](https://www.foundrole.com/locations/us/new-york/new-york?utm_source=ai_markdown) — 66067 jobs - [Software Development](https://www.foundrole.com/sectors/technology/software-development?utm_source=ai_markdown) — 14688 jobs ## Related pages - [New York](https://www.foundrole.com/locations/us/new-york?utm_source=ai_markdown) — 150107 jobs - [New York, NY](https://www.foundrole.com/locations/us/new-york/new-york?utm_source=ai_markdown) — 66067 jobs - [Software Development](https://www.foundrole.com/sectors/technology/software-development?utm_source=ai_markdown) — 14688 jobs ## Browse - [Companies](https://www.foundrole.com/companies?utm_source=ai_markdown) - [Jobs by country](https://www.foundrole.com/locations?utm_source=ai_markdown) - [Jobs in the United States by state and city](https://www.foundrole.com/locations/us?utm_source=ai_markdown) - [H1B sponsors by location](https://www.foundrole.com/h1b-sponsors?utm_source=ai_markdown) - [H1B salaries](https://www.foundrole.com/h1b-salaries?utm_source=ai_markdown) - [Sectors and industries](https://www.foundrole.com/sectors?utm_source=ai_markdown) - [Jobs by career field](https://www.foundrole.com/careers?utm_source=ai_markdown) - [Latest jobs](https://www.foundrole.com/jobs/latest?utm_source=ai_markdown)