About Starbridge
We're building the front door for how businesses partner with government in America.
Public agencies spend roughly a trillion dollars a year with private companies, and nearly all of it still moves through infrastructure that hasn't changed in decades. Starbridge is building the full operating system for that relationship: the data, the signals, the workflows, and the rails that let a company find a public buyer, win the work, and get paid.
We monitor 320,000+ public sector entities around the clock. 500+ customers have joined us since our launch in March. We've raised $50M from top investors including Craft and Michael Seibel of Y Combinator.
About the role
Your primary focus will be cloud security and hardening, vulnerability management, and the technical work behind our security and compliance program. You'll investigate findings, implement controls, drive remediation, and maintain evidence that demonstrates how our systems protect customer data.
You'll also share responsibility for infrastructure and reliability with our engineering team. That includes improving deployments, troubleshooting production issues, and contributing code that makes our platform more secure and dependable.
We're particularly interested in someone who enjoys tinkering with AI and building automations that make everyday work easier.
Our stack includes AWS, GCP, Kubernetes/EKS, Terraform, PostgreSQL, and Redis.
What you’ll do:
Your primary responsibilities
- Cloud security and hardening. Strengthen identity and access management, networking, encryption, secrets management, and container security across AWS and GCP. Implement improvements through infrastructure as code and automated checks.
- Vulnerability management. Manage findings across applications, dependencies, containers, and cloud infrastructure. Coordinate penetration tests, assess exploitability and impact, prioritize remediation, and verify closure. Keep clear reporting on outstanding risks and deadlines.
- Technical compliance and customer trust. Maintain control documentation, remediation plans, and audit evidence. Support assessments, continuous monitoring, and customer security reviews, including work related to FedRAMP. Translate requirements into practical engineering changes and repeatable procedures.
In partnership with engineering
- Infrastructure and reliability. Improve deployment pipelines, monitoring, alerting, backups, and recovery procedures. Help manage upgrades, investigate production incidents, and resolve recurring operational problems.
