Senior Application Security Engineer | AI-Driven Security Automation

Starburst; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equity packages

Comprehensive benefits

Job summary

Starburst is seeking a Senior Application Security Engineer to own the security program across its self‑managed enterprise platform and SaaS. This hands‑on role embeds secure‑by‑default patterns into how engineers design and ship, and uses automation and AI to scale security across a large product portfolio.

You will drive threat modeling, vulnerability management, and supply‑chain security, while engaging directly with enterprise customers on posture and assurance in high‑trust environments.

Qualifications

• Bachelor's degree in Computer Science, Engineering, MIS, or equivalent practical experience.
• 5-7 years of experience in application security, product security, software engineering with a security focus, or a related technical role.
• Deep command of application and product security fundamentals, with the judgment to distinguish real exploitability from scanner noise.
• Proven experience embedding security into the SDLC and getting engineering teams to actually adopt it - plus building and scaling processes that raise a program's overall maturity.
• Demonstrated experience running vulnerability management for shipped software at scale, with strong knowledge of container/image security and JVM dependency and supply chain risk.
• Offensive security experience and a drive to automate it: red‑teaming, or threat hunting against your own products.
• Threat modeling experience on distributed systems and data platforms, and a strong bias toward automation, including using AI to scale security work.
• Experience in enterprise B2B software and working directly with enterprise customers on security, ideally in regulated industries such as financial services.
• Experience leading and mentoring engineers.

Responsibilities

• Own and mature the Application Security program, moving it from established practice to measurable, automated, and scaled across a large engineering organization.
• Shift security left into the SDLC, embedding secure‑by‑default patterns, guardrails, threat modeling, and automated checks into design and development (including for AI‑assisted development) so issues are prevented rather than found late.
• Build autonomous red‑teaming and threat hunting against our own products, using AI and automation to continuously probe for weaknesses instead of relying on point‑in‑time testing.
• Own vulnerability management for everything we ship across our self‑managed enterprise platform and SaaS product - container images, third‑party dependencies, and first‑party code - automating detection, triage, and routing, and advancing remediation through reachability/exploitability analysis and attack‑surface reduction.
• Own application and supply chain security tooling (SAST, SCA, DAST, container scanning), plus third‑party penetration testing and the Vulnerability Disclosure Program.
• Be the security voice with customers and leadership, working directly with enterprise customers on posture and assurance, and reporting on product security in executive, customer, and audit conversations.

Skills

Application Security

Threat Modeling

Automation

Vulnerability Management

Red Teaming

AI for Security

Mentoring

Education

Bachelor's degree in CS/Engineering/MIS or equivalent

Tools

SAST

SCA

DAST

Container Scanning

Job description

Starburst is seeking a Senior Application Security Engineer to own the security program across its self‑managed enterprise platform and SaaS. This hands‑on role embeds secure‑by‑default patterns into how engineers design and ship, and uses automation and AI to scale security across a large product portfolio.

You will drive threat modeling, vulnerability management, and supply‑chain security, while engaging directly with enterprise customers on posture and assurance in high‑trust environments.