Application security engineer (Security Engineer II) at Starburst, India: building the automation and tooling that lets a small team secure a large engineering organization - at a friendly 2-4 years bar.

This India role was posted on 25 August 2026. The team's model is scale-through-automation: turn security problems into reliable, repeatable tooling rather than manual review queues. The listing asks for 2-4 years in security or software engineering, OWASP Top 10/CWE fluency, and demonstrated automation building - including using AI - making it one of the more accessible security seats open now.

About Starburst

Starburst is the company behind Starburst Enterprise Platform and Galaxy, built on the open-source Trino SQL query engine: it lets enterprises query data wherever it lives without moving it. The company describes its engineering culture as startup-speed inside an enterprise company, and its India roles are listed as remote within India. Learn more on Starburst's website.

The role in plain terms

You advance Starburst's application security program by building: automation, guardrails and tooling that developers actually adopt. The listing asks for sound security tradeoff judgment, strong understanding of application vulnerabilities and mitigations (OWASP Top 10, CWE), cloud security concepts and hands-on experience with at least one of AWS, Azure or GCP.

What you will do

Per the employer's listing, you will:

Bachelor's degree in Computer Science, Engineering, MIS, or equivalent practical experience.
2–4 years of experience in security engineering, software engineering, or a related technical role.
A solid foundation in information security fundamentals, with the judgment to make sound security tradeoffs.
Strong understanding of application vulnerabilities and mitigation strategies (OWASP Top 10, CWE).
Demonstrated experience building automation and tooling, especially using AI, to solve real problems.

What the employer asks for

These requirements are quoted from the employer's listing, kept in their exact words so eligibility details are not distorted:

Bachelor's degree in Computer Science, Engineering, MIS, or equivalent practical experience.
2-4 years of experience in security engineering, software engineering, or a related technical role.
Strong understanding of application vulnerabilities and mitigation strategies (OWASP Top 10, CWE).
Familiarity with cloud security concepts and hands-on experience with at least one cloud platform (AWS, Azure, or GCP).
Demonstrated experience building automation and tooling, especially using AI, to solve real problems.

Who this role suits

Engineers with 2-4 years who like security but prefer building tools to running scanners - product-security-minded developers are exactly the target. The AI-assisted automation angle rewards people already using LLMs in their workflow. Not for SOC analysts looking for alert-triage work.

Practical notes

The listing names AI-based automation explicitly, so bring a concrete example of tooling you built, ideally AI-assisted. Expect OWASP fundamentals and a design question about scaling security review. India-wide location - confirm work arrangement on the employer's page.

How to apply

Apply directly on the employer's site: Security Engineer at Starburst. We found this listing on the Greenhouse public job board (job-boards.greenhouse.io), where it was posted on 25 Aug 2026 and was still open when we checked on 31 Oct 2026. Before applying, re-read the employer's own description in full, since eligibility details, deadlines and process steps can change at any time and the employer's page is always the final word. Tailor your resume to the specific requirements above rather than sending a generic one: mirror the skills and tools the listing names where you genuinely have them. A short, specific note on why this team and this problem interest you goes further than a long generic cover letter. Never pay a fee to apply or interview; genuine employers, including this one, do not charge candidates.

Related openings on GetFirstJob

If this role is not the right fit, these current openings are in a similar area:

We write and maintain this page from the employer's public listing and link straight to their application page. We do not act as a recruiter, and applying is always free. If the link above stops working, the role has likely been filled.

This is our short summary of the employer's listing. The full description, eligibility and deadline are on the employer's page.