Senior Application Security Engineer, Starburst
$175-215k
Data platform for analytics, apps and AI
Posted today
Data platform for analytics, apps and AI
501-1000 employees
Posted today
$175-215k
501-1000 employees
Company mission
To free customers from the tyranny of data lock-in.
Role
Who you are
- Bachelor’s degree in Computer Science, Engineering, MIS, or equivalent practical experience
- 5-7 years of experience in application security, product security, software engineering with a security focus, or a related technical role
- Deep command of application and product security fundamentals, with the judgment to distinguish real exploitability from scanner noise
- Proven experience embedding security into the SDLC and getting engineering teams to actually adopt it — plus building and scaling processes that raise a program's overall maturity
- Demonstrated experience running vulnerability management for shipped software at scale, with strong knowledge of container/image security and JVM dependency and supply chain risk
- Offensive security experience and a drive to automate it: red-teaming, or threat hunting against your own products
- Threat modeling experience on distributed systems and data platforms, and a strong bias toward automation, including using AI to scale security work
- Experience in enterprise B2B software and working directly with enterprise customers on security, ideally in regulated industries such as financial services
- Experience leading and mentoring engineers
What the job involves
- As our Senior Application Security Engineer, you'll be the technical owner of application and product security at Starburst — one person with outsized impact, backed by automation and AI rather than a large team
- This is deep, hands-on engineering work: you'll build secure-by-default patterns into how our engineers design and ship, embed security controls earlier in the development lifecycle, and create the automation that lets you cover a large engineering organization
- You'll get to stand up autonomous red-teaming and threat hunting against our own products, run vulnerability management across both our self-managed enterprise platform and our SaaS, and advance our software supply chain security
- Because our biggest customers are global banks, you'll also be in the room with them, explaining how we secure what we ship — the kind of high-trust, high-stakes conversation that makes this work matter
- If you want to make products secure by design rather than chase what's already broken, own a program end to end, and use AI to build defensive tools, this is your opportunity
- You'll work closely with Engineering, Product, and the field
- Own and mature the Application Security program, moving it from established practice to measurable, automated, and scaled across a large engineering organization
- Shift security left into the SDLC, embedding secure-by-default patterns, guardrails, threat modeling, and automated checks into design and development (including for AI-assisted development) so issues are prevented rather than found late
- Build autonomous red-teaming and threat hunting against our own products, using AI and automation to continuously probe for weaknesses instead of relying on point-in-time testing
- Own vulnerability management for everything we ship across our self-managed enterprise platform and SaaS product — container images, third-party dependencies, and first-party code — automating detection, triage, and routing, and advancing remediation through reachability/exploitability analysis and attack-surface reduction
- Own application and supply chain security tooling (SAST, SCA, DAST, container scanning), plus third-party penetration testing and the Vulnerability Disclosure Program
- Be the security voice with customers and leadership, working directly with enterprise customers on posture and assurance, and reporting on product security in executive, customer, and audit conversations
Our take
Starburst offers a unified platform for accessing distributed data from various databases through its Trino-based query engine. This approach helps users cut infrastructure and analytics costs by providing a single point of access. As the Data Lakes market grows nearly 30% annually, Starburst is well-positioned to help businesses manage their increasingly complex data.
The company has recently gained recognition for its advanced capabilities in data management. Starburst emphasizes the importance of real-time hybrid data access and robust security, especially for AI applications. Its latest report, developed in collaboration with TheCUBE Research, underscores how effective data management practices are essential for successful AI implementation.s
Key findings from the report include the critical need for real-time data access and the alignment of data strategies with AI goals. These insights highlight how Starburst's technology supports efficient AI deployment and data management.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
17% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Feb 2022
$250m
SERIES D
Dec 2020
$100m
SERIES C
Total funding: $414m
Company benefits
- Comprehensive Health Insurance Coverage
- Life Insurance, Disability, and Income Protection
- Employee assistance Programs
- Flexible Paid Time Off
- Paid Parental Leave
- Remote Work Opportunties
- Equity Ownership
Company HQ
Fort Point Channel Landmark District, Boston, MA
Leadership
Justin Borgman
(CEO & Chairman)Founder and CEO of Starburst's precursor company Hadapt, which was acquired by Terdata in 2014. Served as VP & GM at Teradata before co-relaunching Hadapt as Starburst in 2017.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 9 more jobs at Starburst