# Security Engineer

**Company:** [Starburst](https://hotfix.jobs/companies/starburst)
**Location:** Unspecified
**Role:** Security Engineering
**Experience:** 2+ years
**Skills:** Application Security, Owasp Top 10, Cwe, Python, Go, Java, JavaScript, TypeScript, CI/CD, Git, AWS, Azure, GCP, SAST, DAST
**Posted:** 2026-08-25

> Build production security automation, CI/CD guardrails, and AI-assisted workflows for Starburst’s Application Security program. The role requires a strong information security foundation, software engineering ability, and 2–4 years of relevant experience.

## Job Description

## Responsibilities
- Build automation and tooling for the Application Security program, including AI-assisted systems that scale security work.
- Integrate security checks into CI/CD pipelines and develop reusable guardrails and secure-by-default components.
- Support and extend SAST, DAST, SCA, and secrets-scanning tools, routing findings to engineering teams and helping developers remediate them.
- Prototype and productionize AI-assisted workflows for security triage, analysis, and remediation.
- Support vulnerability management by detecting, triaging, and routing newly disclosed vulnerabilities.
- Improve secure coding standards, documentation, and remediation playbooks.
- Collaborate closely with Engineering and Product.

## Requirements
- Bachelor's degree in Computer Science, Engineering, MIS, or equivalent practical experience.
- 2–4 years of experience in security engineering, software engineering, or a related technical role.
- Strong foundation in information security fundamentals and sound security judgment.
- Understanding of application vulnerabilities and mitigation strategies, including OWASP Top 10 and CWE.
- Experience building automation and tooling, especially using AI to solve practical problems.
- Experience with Python, Go, Java, or JavaScript/TypeScript; Java and Python preferred.
- Experience with CI/CD tooling, Git-based workflows, and modern development practices.
- Familiarity with cloud security concepts and hands-on experience with at least one cloud platform: AWS, Azure, or Google Cloud.

## Nice-to-haves
- Experience in enterprise B2B software, self-managed software, and/or SaaS.

## Similar jobs

- [Information Security Engineer](https://hotfix.jobs/jobs/427d1625-16a6-4994-817d-d0966de9c1d1) - Q4 Inc
- [Platform Security Engineer](https://hotfix.jobs/jobs/e556dd76-0f95-4dfa-9d3d-e476f24057c0) - Supabase - Remote
- [Manager, Security Operations](https://hotfix.jobs/jobs/0a4637da-6072-4ec3-a0a9-8b6d4a412d45) - Vanta - Remote - $178k – $209k/yr
- [Supply Chain Security Engineer](https://hotfix.jobs/jobs/7ea430fb-72cd-43f4-9700-2698a4cc949f) - Glean - Bengaluru, India
- [Specialist, CSIRT](https://hotfix.jobs/jobs/d5cdd102-2c55-4adf-a397-fb50362f7fea) - Coinbase - Remote

**Apply:** https://hotfix.jobs/jobs/bbe1f814-ebd5-4772-ae45-046d0bee5adf
**Canonical:** https://hotfix.jobs/jobs/bbe1f814-ebd5-4772-ae45-046d0bee5adf