Senior AppSec Engineer for AI-Enabled Platform

Suno; New York (NY); On-site; USD 230,000 - 330,000; Full time

Benefits offered by this job

Company Equity Package

401(k) with 3% Employer Match

Medical, Dental, & Vision Insurance

11 Paid Holidays + Unlimited PTO & S 

16 Weeks of Paid Parental Leave

Creative Education Stipend

Generous Commuter Allowance

In‑Office Lunch (5 days per week)

Job summary

Suno is seeking a Senior / Staff Application Security Engineer to own the security of how our product is built. You’ll threat-model the product, harden the application layer, and build the AppSec practice from the ground up.

You’ll lead end-to-end security initiatives, focusing on secure design, SDLC tooling, and collaboration with engineers to elevate the security bar across codebases and AI features.

Qualifications

• 6+ years in security engineering with hands-on AppSec expertise.
• Strong command of vulnerability classes and how to eliminate them at the source — code, API, and authz design.
• A builder who has stood up AppSec practices and secure-SDLC tooling, not only operated established ones.
• Fluent in modern application stacks and comfortable in AWS.
• Able to work shoulder-to-shoulder with engineers and raise the bar without becoming a blocker.
• Able to write and ship production-quality code, not only review it.
• Curiosity about emerging AI/LLM threat classes and how to defend against them as the product evolves.
• Nice to have: consumer product at scale, secure-by-design work on generative-AI or ML product surfaces, and/or early security-hire experience.

Responsibilities

• Execute application security end to end: threat-model features and services, and drive remediation of the most significant risks.
• Secure the application layer against the vulnerabilities that matter most — injection, broken authentication/authorization, and insecure APIs.
• Build and run a secure SDLC: code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, and pre-production testing.
• Harden authentication, authorization, and session/identity handling across the product.
• Secure the AI-specific application surface — model and inference endpoints, prompt and input handling, and the new classes of vulnerability that come with shipping generative features.
• Partner with product and platform engineering to design security in early and raise the security bar across the codebase.
• Set the standard for how engineering reasons about and ships secure code.

Skills

Application security

Threat modeling

Secure SDLC

AWS

Code review

Security tooling

Cross-functional collaboration

Job description

Suno is seeking a Senior / Staff Application Security Engineer to own the security of how our product is built. You’ll threat-model the product, harden the application layer, and build the AppSec practice from the ground up.

You’ll lead end-to-end security initiatives, focusing on secure design, SDLC tooling, and collaboration with engineers to elevate the security bar across codebases and AI features.