Senior AppSec Engineer — Secure AI Platform & SDLC Lead

Suno; San Francisco (CA); On-site; USD 230,000 - 330,000; Full time

Benefits offered by this job

Company Equity Package

401(k) with 3% Employer Match & Roth  

Medical, Dental, & Vision Insurance (P

11 Paid Holidays + Unlimited PTO &  S

16 Weeks of Paid Parental Leave

Creative Education Stipend

Generous Commuter Allowance

In-Office Lunch (5 days per week)

Job summary

Suno is building the world’s first creative entertainment platform, empowering everyone to make music. We seek a Senior/Staff Application Security Engineer to own security across code, APIs, and services, shaping security from the ground up.

You will threat-model features, secure the SDLC, and harden authentication and AI-facing surfaces, partnering with product and platform engineers to raise the bar and ship secure code.

Qualifications

• 6+ years in security engineering with hands-on application-security expertise.
• Experience building AppSec programs and secure-SDLC tooling.
• Proficient in modern stacks and AWS.
• Ability to partner with engineers and raise security without blocking delivery.
• Curiosity about AI/LLM threat classes and defense strategies.

Responsibilities

• Threat-model features and services and drive remediation of major risks.
• Secure the application layer against critical vulnerabilities.
• Build and operate secure SDLC guardrails, tooling, and testing.
• Harden authentication, authorization, and session handling.
• Secure AI-specific surfaces like model/inference endpoints and prompts.

Skills

Security engineering

AppSec program building

AWS

Secure SDLC

Threat modeling

Code quality & production readiness

AI/LLM threat knowledge

Tools

AWS

SAST/DAST

AppSec tooling

Job description

Suno is building the world’s first creative entertainment platform, empowering everyone to make music. We seek a Senior/Staff Application Security Engineer to own security across code, APIs, and services, shaping security from the ground up.

You will threat-model features, secure the SDLC, and harden authentication and AI-facing surfaces, partnering with product and platform engineers to raise the bar and ship secure code.