App & Product Security Engineer (Hybrid, Warsaw)

Starburst; Warszawa; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

Starburst is seeking a Security Engineer focused on application and product security in Warsaw. You will integrate secure practices into the development lifecycle, implement security controls, and collaborate with engineers to harden and secure services.

In this role you will review code, model threats, and sustain security tooling across CI/CD pipelines. The position follows a hybrid model with onsite work 1–2 days per week.

Qualifications

• Bachelor’s degree in CS, Engineering, MIS, or equivalent practical experience.
• 2–5 years in application security, product security, or related technical roles.
• Strong understanding of vulnerabilities and mitigations (OWASP Top 10, CWE).
• Experience with CI/CD tooling and Git-based workflows.
• Hands-on cloud security, with AWS, Azure, or GCP.
• Experience with OWASP ZAP, Burp Suite, SAST/DAST/SCA tools.
• Knowledge of secure coding, API security, authentication, authorization, and secrets management.
• Strong communication and collaboration across teams; ability to travel 25%.

Responsibilities

• Integrate security into the software development lifecycle with engineering teams.
• Support and maintain application security tooling and guide remediation.
• Conduct secure code reviews, threat modeling, and architecture assessments.
• Develop security automation, guardrails, and reusable components.
• Help define secure coding standards and application hardening.
• Improve logging, telemetry, and alerting for security visibility.
• Assist in incident response related to application vulnerabilities.
• Stay current on emerging threats and best practices in app security.
• Contribute to security documentation, guidelines, and playbooks.
• Participate in internal security reviews and architectural walkthroughs.
• Maintain existing security tools, pipelines, and workflows.
• Collaborate with engineering and product teams for secure deployments.

Skills

Secure coding

CI/CD security

Threat modeling

OWASP Top 10

Cloud security

Communication skills

Agile development

Security tooling

Education

Bachelor's degree in CS/Engineering or equivalent

Tools

SAST tools

DAST tools

SCA

Burp Suite

OWASP ZAP

Job description

Starburst is seeking a Security Engineer focused on application and product security in Warsaw. You will integrate secure practices into the development lifecycle, implement security controls, and collaborate with engineers to harden and secure services.

In this role you will review code, model threats, and sustain security tooling across CI/CD pipelines. The position follows a hybrid model with onsite work 1–2 days per week.