Senior Application Security Engineer

About the Position

We are looking for a Senior Application Security Engineer to join our team in Boston, MA. At Starburst, we deliver enterprise intelligence at scale by providing secure, governed access to all data, wherever it lives. Our mission is to power AI and analytics without the cost and complexity of traditional data consolidation.

About the Role

As our Senior Application Security Engineer, you'll be the technical owner of application and product security at Starburst. This role involves deep, hands-on engineering work where you'll build secure-by-default patterns into how our engineers design and ship, embed security controls earlier in the development lifecycle, and create the automation that lets you cover a large engineering organization. You'll also stand up autonomous red-teaming and threat hunting against our own products, run vulnerability management across our self-managed enterprise platform and our SaaS, and advance our software supply chain security.

Responsibilities

• Own and mature the Application Security program, moving it from established practice to measurable, automated, and scaled across a large engineering organization.
• Shift security left into the SDLC, embedding secure-by-default patterns, guardrails, threat modeling, and automated checks into design and development.
• Build autonomous red-teaming and threat hunting against our own products, using AI and automation to continuously probe for weaknesses.
• Own vulnerability management for everything we ship across our self-managed enterprise platform and SaaS product.
• Own application and supply chain security tooling (SAST, SCA, DAST, container scanning), plus third-party penetration testing and the Vulnerability Disclosure Program.
• Be the security voice with customers and leadership, working directly with enterprise customers on posture and assurance, and reporting on product security in executive, customer, and audit conversations.

Requirements

• Bachelor’s degree in Computer Science, Engineering, MIS, or equivalent practical experience.
• 5-7 years of experience in application security, product security, software engineering with a security focus, or a related technical role.
• Deep command of application and product security fundamentals.
• Proven experience embedding security into the SDLC and getting engineering teams to adopt it.
• Demonstrated experience running vulnerability management for shipped software at scale.
• Offensive security experience and a drive to automate it: red-teaming, or threat hunting against your own products.
• Threat modeling experience on distributed systems and data platforms, and a strong bias toward automation.
• Experience in enterprise B2B software and working directly with enterprise customers on security, ideally in regulated industries such as financial services.
• Experience leading and mentoring engineers.
• Ability to Travel: This role will require 25% in-person travel.

We Offer

• Competitive salary range: $175,000 - $215,000 USD
• Equity packages (ISOs)
• Comprehensive benefits offering
• Flexible paid time off
• And more!

About the Company

Starburst delivers enterprise intelligence at scale by giving organizations secure, governed access to all their data, wherever it lives. Built for distributed data environments, Starburst helps enterprises power AI and analytics without the cost and complexity of traditional data consolidation. With open standards including Trino and Apache Iceberg, Starburst enables trusted access to complete enterprise context while helping organizations avoid vendor lock-in. Leading global enterprises trust Starburst to fuel AI, analytics, and enterprise intelligence. Learn more at starburst.ai.

Starburst is dedicated to maintaining fair and equitable compensation practices. The salary range provided for this role reflects the minimum and maximum targets for candidates across all U.S. locations and could be inclusive of variable compensation, such as commission or bonus. Actual compensation packages are determined based on relevant skills, experience, education and training, and specific work location.

We are committed to fostering an intentional, inclusive, and diverse culture that drives deep engagement, authentic belonging, and an exceptional All-Star experience. We believe that diversity of thought, perspective, background, and experience will enable us to own what we do, drive our success, and empower our All-Stars to show up authentically.

Starburst provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.