2 months ago
Boston, MA, USA +3 moreSenior / Staff+
H1B sponsor
Base Salary
$230k - $330k/yr
Responsibilities
- Execute application security end to end through threat modeling and remediation of significant risks.
- Protect the application layer against injection, broken authentication and authorization, and insecure APIs.
- Build and operate a secure SDLC with code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, and pre-production testing.
- Harden authentication, authorization, and session and identity handling across the product.
- Secure AI-specific application surfaces, including model and inference endpoints and prompt and input handling.
- Partner with product and platform engineering to incorporate security early and improve secure-code practices across the codebase.
- Establish the engineering standard for designing and shipping secure code.
Requirements
- 6+ years of security engineering experience with deep hands-on application-security expertise.
- Strong knowledge of injection, broken authentication and authorization, insecure APIs, code security, API security, and authorization design.
- Experience building AppSec practices and secure-SDLC tooling rather than only operating established programs.
- Fluency with modern application stacks and comfort working in AWS.
- Ability to write and ship production-quality code and collaborate closely with engineers.
- Curiosity about emerging AI and LLM threat classes and defensive approaches.
- Preferred: consumer product experience at scale, secure-by-design work on generative-AI or ML product surfaces, and/or experience as an early security hire.
- Applicants must be eligible to work in the United States.
Benefits
- Company equity package; 401(k) with 3% employer match and Roth 401(k); medical, dental, and vision insurance with PPO, HSA, and FSA options; 11 paid holidays; unlimited PTO and sick time; 16 weeks of paid parental leave; creative education stipend; generous commuter allowance; in-office lunch five days per week.
- Full-time role requiring onsite work at one of three offices.
About Suno
Suno builds an AI music-creation platform and Suno Studio, tools that let anyone generate complete songs without instruments, used by hobbyists and professional artists. It operates a consumer subscription business and is exploring additional monetization products. Founded in 2022 and headquartered in Cambridge, Massachusetts, the privately held company targets the global music and entertainment market.