2 months ago
Base Salary
$175k - $215k/yr
Responsibilities
- Own and mature the application security program across a large engineering organization.
- Embed secure-by-default patterns, threat modeling, guardrails, and automated security checks into the SDLC, including AI-assisted development.
- Build autonomous red-teaming and threat-hunting capabilities using AI and automation.
- Own vulnerability management across self-managed enterprise and SaaS products, including container images, third-party dependencies, and first-party code.
- Own SAST, SCA, DAST, container scanning, software supply chain security tooling, third-party penetration testing, and the Vulnerability Disclosure Program.
- Represent product security in customer, executive, leadership, and audit conversations.
- Lead and mentor engineers while partnering with Engineering, Product, and field teams.
Requirements
- Bachelor’s degree in Computer Science, Engineering, MIS, or equivalent practical experience.
- 5–7 years of experience in application security, product security, security-focused software engineering, or a related technical role.
- Deep knowledge of application and product security fundamentals, including exploitability assessment and scanner-noise evaluation.
- Experience embedding security into the SDLC and scaling security programs and adoption across engineering teams.
- Experience with vulnerability management for shipped software, container and image security, JVM dependencies, and software supply chain risk.
- Offensive security experience in red-teaming or threat hunting against products.
- Experience threat modeling distributed systems and data platforms and using automation or AI to scale security work.
- Experience in enterprise B2B software and direct engagement with enterprise customers on security, preferably in regulated industries.
- Experience leading and mentoring engineers.
Benefits
- Competitive pay, attractive stock grants, flexible paid time off, and a comprehensive benefits offering.
- Employees receive equity packages in the form of ISOs.
- The posted U.S. pay range is $175,000–$215,000 and may include variable compensation such as commission or bonus.
- Starburst is committed to an inclusive, diverse workplace and equal employment opportunity.
Categories
About Starburst
Starburst builds an enterprise data platform that lets teams query and govern distributed data across clouds and on‑prem systems without copying it, powered by Trino and Apache Iceberg. It sells commercial Trino-based software and a managed cloud service for federated SQL, data lakehouse analytics, and governance. Founded in 2017 and headquartered in Boston, the privately held company serves global enterprises; customers include Comcast and Citigroup.