Senior AppSec Engineer: Secure AI/ML Platform, Equity

suno; Boston (MA); On-site; USD 230,000 - 330,000; Full time

Benefits offered by this job

Company Equity Package

401(k) with 3% Employer Match & Roth 0

Medical, Dental, & Vision Insurance

11 Paid Holidays + Unlimited PTO & S

16 Weeks of Paid Parental Leave

Creative Education Stipend

Generous Commuter Allowance

In-Office Lunch

Job summary

Suno is hiring a Senior/Staff Application Security Engineer to own security across our product, APIs, and services. You will threat-model features, harden the app layer, and lead the AppSec practice from the ground up in a fast-growing AI-driven platform.

You will build secure systems, guide engineering teams, and advance threat-detection for AI surfaces while improving the secure development lifecycle and production-grade code delivery.

Qualifications

• 6+ years in security engineering with hands-on AppSec expertise.
• Strong knowledge of vulnerabilities across code, API, and authz design.
• Built AppSec practices and secure-SDLC tooling, not only operated them.
• Fluent in modern application stacks and comfortable in AWS.
• Able to ship production-quality code, not only review it.
• Curiosity about emergent AI/LLM threat classes and defenses as products evolve.
• Nice to have: experience with generative AI security in consumer products.

Responsibilities

• Execute application security end to end: threat-model features and services and drive remediation of top risks.
• Secure the application layer against high-impact vulnerabilities: injection, broken auth, insecure APIs.
• Build and run a secure SDLC with code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, pre-production testing.
• Harden authentication, authorization, and session/identity handling across the product.
• Secure the AI-specific surface: model/inference endpoints, prompt handling, and new vulnerability classes for generative features.
• Partner with product and platform engineering to bake security in early and raise the security bar across the codebase.
• Set the standard for how engineering reasons about and ships secure code.

Skills

AppSec

Threat Modeling

Secure SDLC

AWS

Production-grade code

AI/LLM security

Security architecture

Engineer collaboration

Tools

AWS

Secure-SDLC tooling

Job description

Suno is hiring a Senior/Staff Application Security Engineer to own security across our product, APIs, and services. You will threat-model features, harden the app layer, and lead the AppSec practice from the ground up in a fast-growing AI-driven platform.

You will build secure systems, guide engineering teams, and advance threat-detection for AI surfaces while improving the secure development lifecycle and production-grade code delivery.