SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Starburst is seeking a Senior Application Security Engineer to own and mature the application and product security program across the organization. This is a hands-on technical role where you'll be the primary driver of security strategy, backed by automation and AI rather than a large team.
Key responsibilities include:
**Program Ownership & Maturity**: Own the application security program end-to-end, moving it from established practice to measurable, automated, and scaled across a large engineering organization. You'll work to embed security into the culture and processes of the engineering teams.
**Shift-Left Security**: Embed secure-by-default patterns, guardrails, and threat modeling into the design and development lifecycle. This includes securing AI-assisted development workflows, preventing issues early rather than discovering them late in the process.
**Autonomous Red-Teaming & Threat Hunting**: Build and run autonomous red-teaming and threat hunting operations against Starburst's own products using AI and automation to continuously identify weaknesses rather than relying on point-in-time testing.
**Vulnerability Management at Scale**: Own vulnerability management across both self-managed enterprise platform and SaaS offerings, including container images, third-party dependencies, and first-party code. Automate detection, triage, and remediation routing using reachability and exploitability analysis.
**Security Tooling & Supply Chain**: Own application and supply chain security tooling (SAST, SCA, DAST, container scanning), manage third-party penetration testing, and oversee the Vulnerability Disclosure Program.
**Customer & Leadership Engagement**: Serve as the security voice with enterprise customers and leadership, working directly on security posture and assurance conversations, and reporting on product security in executive, customer, and audit settings.
Starburst delivers enterprise intelligence at scale, helping organizations access all their data securely and governed, wherever it lives. The company serves leading global enterprises including major financial institutions, making security a core differentiator.
