Security Engineer
StarburstData Lakehouse company
IndiaMid
Altimeter Capital
a16z
Index Ventures
Founders Circle Capital
Thoma Bravo
Wejchert Capital
Software EngineeringNew
About the role
TL;DR
Build automation and tooling to advance Starburst's Application Security program.
- •As a Security Engineer II, you'll help advance Starburst's Application Security program by building the automation and tooling that allows a small team to secure a large engineering organization.
- •You'll take security problems and turn them into reliable, automated systems, using AI where it adds leverage.
- •This is a hands-on engineering role: you'll write production code, integrate security checks into CI/CD pipelines, and build automation and guardrails the program depends on.
- •Key Responsibilities Build automation and tooling for the Application Security program, turning manual, repetitive, or hard-to-scale security work into reliable automated systems, increasingly powered by AI.
- •Integrate security into the development lifecycle, enabling automated security checks within CI/CD pipelines and building reusable guardrails and secure-by-default components.
- •Support and extend our security stack (SAST, DAST, SCA, secrets scanning), connecting tools so findings reach the right engineering team quickly and helping developers interpret and remediate them.
- •Apply AI to scale security work, prototyping and productionizing AI-assisted workflows for triage, analysis, and remediation.
- •Requirements Bachelor's degree in Computer Science, Engineering, MIS, or equivalent practical experience. 2–4 years of experience in security engineering, software engineering, or a related technical role.
- •A solid foundation in information security fundamentals, with the judgment to make sound security tradeoffs.
- •Strong understanding of application vulnerabilities and mitigation strategies (OWASP Top 10, CWE).
- •Demonstrated experience building automation and tooling, especially using AI, to solve real problems.
Required skills
PythonCI/CDOWASPGit
Nice-to-have skills
GoJavaJavaScriptTypeScriptAWSAzureGoogle Cloud
Domain expertise
cybersecuritydeveloper-tools
Tech stack
PythonGoJavaJavaScriptTypeScriptCI/CDGitAWSAzureGoogle CloudOWASP