Senior Application Security Engineer

Owns application and product security at Starburst, the data platform company, as a single engineer who relies on automation and AI to cover a large engineering organisation. The engineer matures the AppSec program, builds secure-by-default patterns, threat modelling and automated checks into the development lifecycle, sets up continuous AI-driven red teaming and threat hunting against Starburst's own products, and runs vulnerability management across the self-managed platform and the SaaS service. SAST, SCA, DAST and container scanning, external penetration tests and the disclosure program also sit here, along with security conversations with large bank customers.

Starburst wants five to seven years in application or product security, container and JVM supply chain knowledge, offensive skills and enterprise customer experience. Based in Boston.