Suno
Senior / Staff Application Security Engineer
$230K–$330K
NYC +2 · On-site · Staff · Full-time · Posted Aug 4, 2026
- Location
- NYC
Los Angeles
San Francisco - Experience
- 6+ years in security engineering.
- Visa sponsorship
- Applicants must be eligible to work in the US.
About the job
Own and build Suno’s application security practice, securing its product, APIs, services, and generative AI features.
What you'll do
- Threat-model features and services, and drive remediation of significant risks.
- Build and run a secure SDLC, including code-review guardrails, security testing, dependency and supply-chain security, and secrets management.
- Harden authentication, authorization, APIs, and AI-specific application surfaces while partnering with engineering teams.
What they ask for
- 6+ years in security engineering with hands-on application-security expertise.
- Strong knowledge of security vulnerabilities and how to prevent them in code, APIs, and authorization design.
- Experience building AppSec practices and secure-SDLC tooling.
- Fluency in modern application stacks, comfort with AWS, and ability to write and ship production-quality code.
Nice to have
- Consumer product at scale; secure-by-design work on generative-AI or ML product surfaces; or early security-hire experience.
- Curiosity about emerging AI/LLM threat classes.
Pay
$230,000 to 330,000 (base salary)
Tools
AWS, SAST/DAST
AI focus
Secure AI model and inference endpoints, prompt and input handling, and defend against vulnerabilities associated with generative features.
Model-written summary · the original posting is authoritative