Senior AppSec Engineer: AI/ML Security & API Safeguards

Menlo Ventures; San Francisco (CA); On-site; USD 230,000 - 330,000; Full time

Benefits offered by this job

Company Equity Package

401(k) with 3% Employer Match & Roth 0

Medical, Dental, & Vision Insurance (P

11 Paid Holidays + Unlimited PTO & S

16 Weeks of Paid Parental Leave

Creative Education Stipend

Generous Commuter Allowance

In-Office Lunch (5 days per week)

Job summary

Suno is building the world's first creative entertainment platform and is seeking a Senior / Staff Application Security Engineer to own the security of how our product is built. You will threat-model features, harden the application layer, and build the AppSec practice from the ground up.

In this role you will drive secure design, implement SAST/DAST, manage secrets, and protect AI-enabled surfaces while collaborating with engineers to raise the bar on secure coding across the codebase.

Qualifications

• 6+ years in security engineering with hands-on application-security expertise.
• Deep understanding of vulnerability classes and how to eliminate them at the source (code, API, authz design).
• Experience building AppSec practices and secure-SDLC tooling.
• Fluent in modern application stacks and comfortable in AWS.
• Able to collaborate with engineers and raise the security bar without creating blockers.
• Able to write and ship production-quality code, not just review it.
• Curiosity about emerging AI/LLM threat classes and defending the product as it evolves.
• Nice to have: consumer product at scale and/or early security-hire experience.

Responsibilities

• Execute application security end to end: threat-model features and services, and drive remediation of the most significant risks.
• Secure the application layer against critical vulnerabilities: injection, broken authentication/authorization, and insecure APIs.
• Build and run a secure SDLC: code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, pre-production testing.
• Harden authentication, authorization, and session/identity handling across the product.
• Secure the AI-specific surface: model and inference endpoints, prompt/input handling, and new vulnerability classes for generative features.
• Partner with product and platform engineering to design security in early and raise the security bar across the codebase.
• Set the standard for how engineering reasons about and ships secure code.

Skills

AppSec

Threat modeling

SAST/DAST

Secure SDLC

AWS

Code in production

AI threat models

Tools

SAST/DAST tooling

Cloud platforms

Job description

Suno is building the world's first creative entertainment platform and is seeking a Senior / Staff Application Security Engineer to own the security of how our product is built. You will threat-model features, harden the application layer, and build the AppSec practice from the ground up.

In this role you will drive secure design, implement SAST/DAST, manage secrets, and protect AI-enabled surfaces while collaborating with engineers to raise the bar on secure coding across the codebase.