Suno

Senior / Staff Application Security Engineer

NYC. Posted 3 months ago

The role

You will own the security of how the product is built. You will threat-model the product, harden the application layer, and build the AppSec practice from the ground up.

What you will do

  • Execute application security end to end
  • Threat-model features and services and drive remediation of the most significant risks
  • Secure the application layer against vulnerabilities like injection, broken authentication, authorization, and insecure APIs
  • Build and run a secure SDLC including code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, and pre-production testing
  • Harden authentication, authorization, and session/identity handling
  • Secure the AI-specific application surface including model and inference endpoints, prompt and input handling, and generative feature vulnerabilities
  • Partner with product and platform engineering to design security in early
  • Set the standard for how engineering reasons about and ships secure code

Required qualifications

  • 6+ years in security engineering with deep, hands-on application-security expertise
  • Strong command of the vulnerability classes that cause incidents and how to eliminate them at the source
  • A builder who has stood up AppSec practices and secure-SDLC tooling
  • Fluent in modern application stacks and comfortable in AWS
  • Able to work shoulder-to-shoulder with engineers and raise the bar without becoming a blocker
  • Able to write and ship production-quality code
  • Curiosity about emerging AI/LLM threat classes and how to defend against them

Nice to have

  • Consumer product at scale
  • secure-by-design work on generative-AI or ML product surfaces
  • early security-hire experience

Benefits

  • Company Equity Package
  • 401(k) with 3% Employer Match & Roth 401(k)
  • Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)
  • 11 Paid Holidays + Unlimited PTO & Sick Time
  • 16 Weeks of Paid Parental Leave
  • Creative Education Stipend
  • Generous Commuter Allowance
  • In-Office Lunch (5 days per week)

Before you apply

  • Applicants must be eligible to work in the US

About the company

Suno is the fastest growing consumer entertainment company and the leader in AI music. They are building a creative entertainment platform where users can make music.

Senior / Staff Application Security Engineer at Suno | JobZoey