Application Security Engineer: Secure DevOps & Threat Modeling

Starburst Data, Inc.; Warszawa; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Stock grants

Flexible paid time off

Competitive pay

Job summary

Starburst Data, Inc. is seeking a Security Engineer focused on Application and Product Security in a Warsaw-based hybrid role. You will partner with engineering to embed security into the SDLC, implement secure-by-default patterns, and guide remediation across services. Travel up to 25% for onboarding, offsites, and customer engagements.

You will lead secure coding practices, threat modeling, and secure design reviews while maintaining security tooling and standards across the product landscape.

Qualifications

• 2–5 years of application security experience.
• Knowledge of OWASP Top 10 and CWE.
• Experience with CI/CD tooling and Git workflows.
• Cloud security concepts and hands-on experience with AWS/Azure/GCP.
• Experience with security tools such as OWASP ZAP, Burp Suite, SAST/DAST.

Responsibilities

• Integrate security into the development lifecycle and CI/CD pipelines.
• Maintain Application Security tooling (SAST, DAST, SCA, secrets scanning).
• Conduct secure code reviews, threat modeling, and architecture assessments.
• Develop security automation, guardrails, and reusable components.
• Assist in defining secure coding standards and application hardening practices.
• Support monitoring, telemetry, and alerting for applications.
• Assist in incident response related to application vulnerabilities.
• Stay current on emerging threats and practices in app security.
• Contribute to security documentation and remediation playbooks.
• Participate in internal security reviews and architectural walkthroughs.
• Develop and maintain security tools, pipelines, and workflows.
• Collaborate with engineering/product teams for secure deployments.

Skills

OWASP Top 10

CI/CD tooling

Cloud security

Security tooling (SAST/DAST/SCA)

Secure coding principles

Threat modeling

Communication with developers

Education

Bachelor’s degree in Computer Science or equivalent

Tools

OWASP ZAP

Burp Suite

SAST/DAST tools

SCA

Dependency scanning

Job description

Starburst Data, Inc. is seeking a Security Engineer focused on Application and Product Security in a Warsaw-based hybrid role. You will partner with engineering to embed security into the SDLC, implement secure-by-default patterns, and guide remediation across services. Travel up to 25% for onboarding, offsites, and customer engagements.

You will lead secure coding practices, threat modeling, and secure design reviews while maintaining security tooling and standards across the product landscape.