Security Engineer

About the Position

Join Starburst as a Security Engineer II to advance our Application Security program with automation and AI-powered tools.

About the Role

As a Security Engineer at Starburst, you'll help advance our Application Security program by building the automation and tooling that allows a small team to secure a large engineering organization. You'll take security problems and turn them into reliable, automated systems, using AI where it adds leverage. This is a hands-on engineering role: you'll write production code, integrate security checks into CI/CD pipelines, and build automation and guardrails the program depends on.

You don't need deep specialist expertise in vulnerability management or offensive security. What matters is a solid information security foundation, strong engineering skills, and the judgment to make sound security tradeoffs. This role offers room to grow your security depth and take on broader product security responsibilities over time.

You'll work closely with Engineering and Product.

Responsibilities

• Build automation and tooling for the Application Security program, turning manual, repetitive, or hard-to-scale security work into reliable automated systems, increasingly powered by AI.
• Integrate security into the development lifecycle, enabling automated security checks within CI/CD pipelines and building reusable guardrails and secure-by-default components.
• Support and extend our security stack (SAST, DAST, SCA, secrets scanning), connecting tools so findings reach the right engineering team quickly and helping developers interpret and remediate them.
• Apply AI to scale security work, prototyping and productionizing AI-assisted workflows for triage, analysis, and remediation.
• Support vulnerability management operations, helping detect, triage, and route newly disclosed vulnerabilities, and making that process faster and more consistent.
• Make sound security tradeoffs and help improve secure coding standards, documentation, and remediation playbooks.

Requirements

• Bachelor's degree in Computer Science, Engineering, MIS, or equivalent practical experience.
• 2–4 years of experience in security engineering, software engineering, or a related technical role.
• A solid foundation in information security fundamentals, with the judgment to make sound security tradeoffs.
• Strong understanding of application vulnerabilities and mitigation strategies (OWASP Top 10, CWE).
• Demonstrated experience building automation and tooling, especially using AI, to solve real problems.
• Experience with one or more languages such as Python, Go, Java, or JavaScript/TypeScript (Java and Python preferred).
• Experience with CI/CD tooling, Git-based workflows, and modern development practices.
• Familiarity with cloud security concepts and hands-on experience with at least one cloud platform (AWS, Azure, or GCP).
• Experience in enterprise B2B software, self-managed and/or SaaS, is a plus.
• Ability to Travel: This role will require 25% in-person travel for purposes including but not limited to new hire onboarding, team and department offsites, customer engagements, and other company events. Actual travel expectations may vary by role and business needs.

We Offer

• Competitive pay
• Attractive stock grants
• Flexible paid time off
• Professional development opportunities

About the Company

Starburst delivers enterprise intelligence at scale by giving organizations secure, governed access to all their data, wherever it lives. Built for distributed data environments, Starburst helps enterprises power AI and analytics without the cost and complexity of traditional data consolidation. With open standards including Trino and Apache Iceberg, Starburst enables trusted access to complete enterprise context while helping organizations avoid vendor lock-in. Leading global enterprises trust Starburst to fuel AI, analytics, and enterprise intelligence. Learn more at starburst.ai.

We are committed to fostering an intentional, inclusive, and diverse culture that drives deep engagement, authentic belonging, and an exceptional All-Star experience. We believe that diversity of thought, perspective, background, and experience will enable us to own what we do, drive our success, and empower our All-Stars to show up authentically.

Starburst provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.