Senior Application Security Engineer

Overview In this role you will own and scale Starburst's application and product security program, driving secure-by-default practices across a large engineering organization. You’ll shift security left in the SDLC, build AI-assisted automation, and run autonomous red-teaming and threat hunting for our self-managed and SaaS offerings. You’ll lead vulnerability management and supply chain security, while engaging with enterprise customers on posture and assurance. This is a high-impact, autonomous role that shapes product security at scale. Compensation / Benefitsequity packages (ISOs)competitive payflexible paid time offcomprehensive benefitsTotal Rewards programstock grants ResponsibilitiesOwn and mature the Application Security program to be automated and scalable across a large engineering orgShift security left into the SDLC with secure-by-default patterns, guardrails, threat modeling, and automated checksBuild autonomous red-teaming and threat hunting using AI and automationOwn vulnerability management for self-managed and SaaS products, including container images and dependencies, with remediation workflowsOwn app and supply chain security tooling (SAST, SCA, DAST, container scanning) and third-party testingServe as security voice with customers and leadership, presenting posture and assurance in executive and audit contexts Key requirementsBachelor’s degree in Computer Science, Engineering, MIS, or equivalent practical experience5-7 years in application security, product security, or related technical rolesDeep command of application and product security fundamentals with ability to discern real exploitabilityExperience embedding security into the SDLC and scaling security programsExperience running vulnerability management at scale with container and JVM supply chain riskOffensive security experience and automation in red-teaming or threat huntingThreat modeling experience on distributed systems and data platforms with automation biasExperience in enterprise B2B software and working with enterprise customers on security, preferably in regulated industriesExperience leading and mentoring engineersLeadership and mentoringStrong communication with customers and leadershipCollaboration across Engineering, Product, and FieldSASTSCADAST