中级安全工程师
Security Engineer II
星爆提供了企业智能规模，通过为组织提供安全的，管理的访问所有数据，无论它居住在哪里。为分布式数据环境而构建，Starburst 帮助企业使用 AI 和分析技术而不需花费传统数据整合和复杂性。凭借包括 Trino 和 Apache Iceberg 在内的开放标准，Starburt 可以可靠地获取整个企业背景，同时帮助组织避免供应商锁定。全球领先的企业信任 Starburst 来推动 AI,分析和企业智力。了解更多关于该角色的信息[starburst.ai]http://starburst .ai).#### ### 作为一个安全工程师 II,你将通过建立自动化和工具来帮助推进星际爆炸应用程序安全计划。这使得一个小团队能够保护大型工程组织。你将采取安全问题并将其转换成可靠的自动系统，使用人工智能在增加杆的地方。这是一个实践中的工程角色：你会编写生产代码，集成了 CI/CD 管道中安全检查，构建自动化与防护线。重要的是一个坚实的信息安全基础，强大的工程技能和做出合理的安全妥协的判断力。这个角色提供了扩大你的安全深度和随着时间的推移承担更广泛的产品安全责任的空间。你将与工程和产品密切合作。作为星爆公司的安全工程师，你将：- **为应用程序安全计划构建自动化和工具**,将手动，重复性或难以应对规模的安全工作转变为可靠的自动系统，越来越多地由 AI 驱动。- **将安全整合到开发生命周期**,使得 CI/CD 管道内自动化安全检查能够实现，并建立可重复使用的防护围和默认安全组件。- **支持和扩大我们的安全堆** （SAST,DAST,SCA,秘密扫描）,连接工具，以便发现结果快速达到正确的工程团队，帮助开发人员解释和修复它们。- **应用 AI 来扩展安全工作**,为分类，分析和补救提供人工智能辅助的工作流程。- **支援漏洞管理操作**,帮助探测，分类和路由新揭示的漏洞，并使这一过程更快而一致。- ** 进行安全交易
查看英文原文
### **About Starburst**
Starburst delivers enterprise intelligence at scale by giving organizations secure, governed access to all their data, wherever it lives. Built for distributed data environments, Starburst helps enterprises power AI and analytics without the cost and complexity of traditional data consolidation. With open standards including Trino and Apache Iceberg, Starburst enables trusted access to complete enterprise context while helping organizations avoid vendor lock-in. Leading global enterprises trust Starburst to fuel AI, analytics, and enterprise intelligence. Learn more at [starburst.ai](http://starburst.ai).
##### About the role
As a Security Engineer II, you'll help advance Starburst's Application Security program by building the automation and tooling that allows a small team to secure a large engineering organization. You'll take security problems and turn them into reliable, automated systems, using AI where it adds leverage. This is a hands-on engineering role: you'll write production code, integrate security checks into CI/CD pipelines, and build automation and guardrails the program depends on.
You don't need deep specialist expertise in vulnerability management or offensive security. What matters is a solid information security foundation, strong engineering skills, and the judgment to make sound security tradeoffs. This role offers room to grow your security depth and take on broader product security responsibilities over time.
You'll work closely with Engineering and Product.
##### As a Security Engineer at Starburst you will:
- **Build automation and tooling for the Application Security program**, turning manual, repetitive, or hard-to-scale security work into reliable automated systems, increasingly powered by AI.
- **Integrate security into the development lifecycle**, enabling automated security checks within CI/CD pipelines and building reusable guardrails and secure-by-default components.
- **Support and extend our security stack** (SAST, DAST, SCA, secrets scanning), connecting tools so findings reach the right engineering team quickly and helping developers interpret and remediate them.
- **Apply AI to scale security work**, prototyping and productionizing AI-assisted workflows for triage, analysis, and remediation.
- **Support vulnerability management operations**, helping detect, triage, and route newly disclosed vulnerabilities, and making that process faster and more consistent.
- **Make sound security tradeoffs** and help improve secure coding standards, documentation, and remediation playbooks.
##### Some of the things we look for:
- Bachelor's degree in Computer Science, Engineering, MIS, or equivalent practical experience.
- 2–4 years of experience in security engineering, software engineering, or a related technical role.
- A solid foundation in information security fundamentals, with the judgment to make sound security tradeoffs.
- Strong understanding of application vulnerabilities and mitigation strategies (OWASP Top 10, CWE).
- Demonstrated experience building automation and tooling, especially using AI, to solve real problems.
- Experience with one or more languages such as Python, Go, Java, or JavaScript/TypeScript (Java and Python preferred).
- Experience with CI/CD tooling, Git-based workflows, and modern development practices.
- Familiarity with cloud security concepts and hands-on experience with at least one cloud platform (AWS, Azure, or GCP).
- Experience in enterprise B2B software, self-managed and/or SaaS, is a plus.
- **Ability to Travel**: This role will require 25% in-person travel for purposes including but not limited to new hire onboarding, team and department offsites, customer engagements, and other company events. Actual travel expectations may vary by role and business needs.
### **Build your career at Starburst**
All-Stars have the opportunity and freedom to realize their true potential. By building alongside top talent, we’re empowered to take ownership of our careers and drive meaningful change. Anchored in industry-proven technology and unprecedented success, All-Stars are taking on the challenge everyday to disrupt our industry – and the future.
Our global workforce is supported by a competitive Total Rewards program that reflects our commitment to a rewarding and supportive work environment. This includes a variety of benefits like competitive pay, attractive stock grants, flexible paid time off, and more.
We are committed to fostering an intentional, inclusive, and diverse culture that drives deep engagement, authentic belonging, and an exceptional All-Star experience. We believe that diversity of thought, perspective, background and experience will enable us to own what we do, drive our success and empower our All-Stars to show up authentically.
Starburst provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state
or local laws.