Senior Application Security Engineer

About Starburst Starburst delivers enterprise intelligence at scale by giving organizations secure, governed access to all their data, wherever it lives. As enterprises accelerate investments in AI, analytics, and data-driven decision-making, many are held back by fragmented data across on-premises systems, multiple clouds, and hybrid environments. Traditional consolidation approaches are costly, slow, and often leave critical business context behind. The Starburst Enterprise Intelligence Platform helps organizations overcome these barriers by enabling federated access to distributed enterprise data without requiring unnecessary data movement or duplication. With Starburst, AI platforms, applications, and teams can access the complete, trustworthy context they need to move from experimentation to production. Business leaders gain faster time to insight, stronger cross-functional collaboration, and greater confidence in decisions based on governed, complete data. Built on open standards with Trino and Apache Iceberg, Starburst integrates with existing data and analytics ecosystems while helping companies avoid vendor lock-in. The platform is trusted by leading enterprises in more than 60 countries, including Comcast, Citigroup, and four of the top five global banks, to power AI, analytics, and enterprise intelligence at scale.

Starburst

Starburst delivers enterprise intelligence at scale, giving AI platforms secure access to distributed data.

Distributed SystemsDatabasesBig DataAnalyticsData LakeData VirtualizationData FederationTrinoData MeshSQL Query Engine

S

starburst.io

501-1,000 employees

Software Development

Boston, Massachusetts

2017

Privately Held

53k LinkedIn followers

Raised $414M

• Own and mature the Application Security program, moving it from established
• practice to measurable, automated, and scaled across a large engineering
• organization.
• Shift security left into the SDLC, embedding secure-by-default patterns,
• guardrails, threat modeling, and automated checks into design and development
• (including for AI-assisted development) so issues are prevented rather than
• found late.
• Build autonomous red-teaming and threat hunting against our own products,
• using AI and automation to continuously probe for weaknesses instead of
• relying on point-in-time testing.
• Own vulnerability management for everything we ship across our self-managed
• enterprise platform and SaaS product — container images, third-party
• dependencies, and first-party code — automating detection, triage, and
• routing, and advancing remediation through reachability/exploitability
• analysis and attack-surface reduction.
• Own application and supply chain security tooling (SAST, SCA, DAST, container
• scanning), plus third-party penetration testing and the Vulnerability
• Disclosure Program.
• Be the security voice with customers and leadership, working directly with
• enterprise customers on posture and assurance, and reporting on product
• security in executive, customer, and audit conversations.
• practical experience.
• 5-7 years of experience in application security, product security, software
• engineering with a security focus, or a related technical role.
• Deep command of application and product security fundamentals, with the
• judgment to distinguish real exploitability from scanner noise.
• Proven experience embedding security into the SDLC and getting engineering
• teams to actually adopt it — plus building and scaling processes that raise a
• program's overall maturity.
• Demonstrated experience running vulnerability management for shipped software
• at scale, with strong knowledge of container/image security and JVM
• dependency and supply chain risk.
• Offensive security experience and a drive to automate it: red-teaming, or
• threat hunting against your own products.
• Threat modeling experience on distributed systems and data platforms, and a
• strong bias toward automation, including using AI to scale security work.
• Experience in enterprise B2B software and working directly with enterprise
• customers on security, ideally in regulated industries such as financial
• services.
• Experience leading and mentoring engineers.
• Ability to Travel: This role will require 25% in-person travel for purposes
• including but not limited to new hire onboarding, team and department
• offsites, customer engagements, and other company events. Actual travel
• expectations may vary by role and business needs.
• Starburst is dedicated to maintaining fair and equitable compensation practices.
• The salary range provided for this role reflects the minimum and maximum targets
• for candidates across all U.S. locations and could be inclusive of variable
• compensation, such as commission or bonus. All employees receive equity packages
• (ISOs) and have access to a comprehensive benefits offering. Actual compensation
• packages are determined based on relevant skills, experience, education and
• training, and specific work location. For more information, connect with the
• recruiting team or Hiring Manager during the process as they can provide more
• detailed information about the salary range.
• Pay Range
• $175,000—$215,000 USD
• All-Stars have the opportunity and freedom to realize their true potential. By
• building alongside top talent, we’re empowered to take ownership of our careers
• and drive meaningful change. Anchored in industry-proven technology and
• unprecedented success, All-Stars are taking on the challenge everyday to disrupt
• our industry –  and the future.
• Our global workforce is supported by a competitive Total Rewards program that
• reflects our commitment to a rewarding and supportive work environment. This
• includes a variety of benefits like competitive pay, attractive stock grants,
• flexible paid time off, and more.
• applicants for employment and prohibits discrimination and harassment of any

• Equity packages
• Flexible paid time off
• Comprehensive benefits offering
• Competitive pay