Starburst

Build automation and tooling for the Application Security program, turning manual tasks into reliable AI‑enhanced systems. Integrate security checks into CI/CD pipelines and create reusable guardrails for secure‑by‑default development. Support and extend the security stack (SAST, DAST, SCA, secrets scanning) and ensure findings are routed to the right engineering teams. Prototype and productionize AI‑assisted workflows for triage, analysis, and remediation of security issues. Collaborate closely with engineering and product teams to embed security best practices across the product lifecycle.

Strong programming skills in Java or Python with production‑grade code experience. Solid understanding of application security principles and common vulnerabilities (OWASP Top 10). Hands‑on experience integrating security tools (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines. Familiarity with cloud platforms (AWS/GCP/Azure) and containerized environments. Excellent problem‑solving judgment to balance security trade‑offs in fast‑moving development cycles.

Experience building AI/ML models to automate security triage. Knowledge of container security (Docker, Kubernetes) and runtime protection. Familiarity with compliance frameworks such as ISO 27001, SOC 2, or GDPR.