Join Suno as a Senior/Staff Application Security Engineer to secure innovative AI music products and shape the future of entertainment.
Posted by employer 2 months ago
First seen on Joblaze 1 month ago
Last verified on the company career page 10 hours ago
Skills & Technologies
AI in the day-to-day
Curiosity about emerging AI/LLM threat classes and how to defend against them as the product evolves.
Requirements
- Experience
- 6+ years
- Visa
- Sponsorship available
Benefits
Joblaze summary
In this role, the Senior / Staff Application Security Engineer at Suno is responsible for ensuring the security of the company's applications by implementing robust security practices throughout the development lifecycle. The position requires extensive experience in application security, particularly in identifying and mitigating vulnerabilities in code, APIs, and authentication processes, while also being fluent in modern tech stacks and AWS. This role is ideal for seasoned professionals who have built security frameworks from the ground up and can collaborate effectively with engineering teams. Suno's fast-paced environment and focus on AI-driven music innovation present unique challenges
Joblaze insights
- Listed about a month ago — first seen on Joblaze September 3, 2026. Last confirmed on Suno's careers page October 27, 2026.
- Salary band is above the typical range for Security roles (median ~$170,000).
- Starts above 91% of 69 comparable senior security roles in United States that list AWS we track (median $180,000 across 47 companies). See AWS salary trends
- AWS appears in 28% of 347 comparable senior security roles in United States; Secrets Management appears in 0.6% of 347 comparable senior security roles in United States.
Quick facts
- Is the Senior / Staff Application Security Engineer role remote?
- No — this is an on-site role in Boston.
- What's the salary range?
- Suno lists $230,000–$330,000 for this role.
- How much experience is required?
- At least 6 years of relevant experience for this Senior / Staff Application Security Engineer role.
- Where is the role based?
- Suno is hiring for this position in Boston.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AWS, Application Security, DAST, SAST, Secrets Management, Threat Modeling.
- Does Suno sponsor work visas for this role?
- Yes — the posting indicates visa sponsorship is available for the right candidate.
- What seniority level is this role?
- Suno targets senior candidates for this position.
- Is this full-time or contract?
- Full-time for this Senior / Staff Application Security Engineer role at Suno.
From the original posting
About the Role
We’re looking for a Senior / Staff Application Security Engineer to own the security of how our product is built. You’ll be the person who makes sure our code, APIs, and services are secure by design — threat-modeling the product, hardening the application layer, and building the AppSec practice from the ground up.
Listen to the song we made about it: https://suno.com/s/Eh3xgvx2oFpT0QPq
What You’ll Do
Execute application security end to end: threat-model features and services, and drive remediation of the most significant risks.
Secure the application layer against the vulnerabilities that matter most — injection, broken authentication and authorization, and insecure APIs.
Build and run a secure SDLC: code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, and pre-production testing.
Harden authentication, authorization, and session/identity handling across the product.
Secure the AI-specific application surface — model and inference endpoints, prompt and input handling, and the new classes of vulnerability that come with shipping generative features.
Partner with product and platform engineering to design security in early and raise the security bar across the codebase.
Set the standard for how engineering reasons about and ships secure code.
What You’ll Need
6+ years in security engineering with deep, hands-on application-security expertise.
Strong command of the vulnerability classes that cause incidents and how to eliminate them at the source — code, API, and authz design.
A builder who has stood up AppSec practices and secure-SDLC tooling, not only operated established ones.
Fluent in modern application stacks and comfortable in AWS.
Able to work shoulder-to-shoulder with engineers and raise the bar without becoming a blocker.
Able to write and ship production-quality code, not only review it.
Curiosity about emerging AI/LLM threat classes and how to defend against them as the product evolves.
Nice to have: Consumer product at scale, secure-by-design work on generative-AI or ML product surfaces, and/or early security-hire experience.
Perks & Benefits for Full-Time Employees
Company Equity Package
16 Weeks of Paid Parental Leave
Creative Education Stipend
Generous Commuter Allowance
In-Office Lunch (5 days per week)
Additional Notes:
Applicants must be eligible to work in the US.
This role requires working onsite at one of our three offices.
Compensation:
$230,000 to 330,000
Standard company text repeated across Suno's postings is omitted here.