Security Engineer

Overview

Security Engineer II (hands-on) to build automation and tooling for Starburst’s Application Security program, integrating security checks into CI/CD and improving security workflows.

What you'll do

• Build automation and tooling for the Application Security program to make security work scalable.
• Integrate security into the development lifecycle via automated security checks in CI/CD pipelines.
• Support and extend a security stack (SAST, DAST, SCA, secrets scanning) and connect tools for fast routing.
• Apply AI to scale security workflows for triage, analysis, and remediation.
• Support vulnerability management operations to detect, triage, and route newly disclosed vulnerabilities.
• Make security tradeoffs and help improve secure coding standards, documentation, and remediation playbooks.

What you'll need

• 2–4 years of experience in security engineering, software engineering, or a related technical role.
• A solid foundation in information security fundamentals and security tradeoff judgment.
• Strong understanding of application vulnerabilities and mitigation strategies (OWASP Top 10, CWE).
• Demonstrated experience building automation and tooling (especially using AI) to solve real problems.
• Experience with one or more languages: Python, Go, Java, or JavaScript/TypeScript (Java and Python preferred).
• Experience with CI/CD tooling, Git-based workflows, and modern development practices.
• Familiarity with cloud security concepts and hands-on experience with at least one cloud platform (AWS, Azure, or GCP).