Senior AppSec Engineer for AI-First Platform

Suno; Boston; On-site; PHP 13,973,000 - 20,049,000; Full time

Benefits offered by this job

Company Equity Package

401(k) with 3% Employer Match & Roth

Medical, Dental, & Vision Insurance (P

11 Paid Holidays + Unlimited PTO &

16 Weeks of Paid Parental Leave

Creative Education Stipend

Generous Commuter Allowance

In-Office Lunch (5 days per week)

Job summary

Suno is hiring a Senior / Staff Application Security Engineer to own security of how our product is built. You’ll threat-model the product, harden the application layer, and build the AppSec practice from the ground up.

You’ll work with product and platform teams to design security in early, secure the AI-enabled surface, and raise the bar across the codebase. On-site offices in the US, competitive equity, and a comprehensive benefits package apply.

Qualifications

• 6+ years in security engineering with hands-on appsec expertise.
• Strong knowledge of vulnerability classes and eliminating them at the source (code, API, auth).
• Experience building AppSec practices and secure-SDLC tooling.
• Fluent in modern application stacks and AWS.
• Able to collaborate with engineers and raise the bar without blocking.
• Ability to write and ship production-grade code, not only review.

Responsibilities

• Execute application security end to end: threat-model features and services and drive remediation of significant risks.
• Secure the application layer against injection, broken auth, and insecure APIs.
• Build and run a secure SDLC: code-review guardrails, SAST/DAST, dependency security, secrets management, pre-production testing.
• Harden authentication, authorization, and session/identity handling across the product.
• Secure the AI-specific surface: model/inference endpoints, prompt/input handling, new AI failure modes.
• Partner with product and platform engineering to bake security in early and raise the security bar across the codebase.
• Set the standard for how engineering reasons about and ships secure code.

Skills

Application security

Threat modeling

Secure SDLC tooling

AWS

Code review

Production-grade code

AI/LLM security

Job description

Suno is hiring a Senior / Staff Application Security Engineer to own security of how our product is built. You’ll threat-model the product, harden the application layer, and build the AppSec practice from the ground up.

You’ll work with product and platform teams to design security in early, secure the AI-enabled surface, and raise the bar across the codebase. On-site offices in the US, competitive equity, and a comprehensive benefits package apply.