# Senior / Staff Application Security Engineer

**Company:** [Suno](https://hotfix.jobs/companies/suno)
**Location:** Boston, MA, New York, NY, Los Angeles, CA, San Francisco, CA
**Role:** Security Engineering
**Salary:** $230k – $330k/yr
**Experience:** 6+ years
**Skills:** Application Security, Threat Modeling, secure sdlc, SAST, DAST, dependency security, supply chain security, secrets management, Authentication, authorization, AWS, ai security, llm security, api security, production code
**Posted:** 2026-08-04

> Owns application security across code, APIs, services, identity systems, and AI-specific surfaces. The role requires 6+ years of hands-on security engineering experience, AppSec program-building expertise, modern application-stack knowledge, and AWS proficiency.

## Job Description

## Responsibilities
- Execute application security end to end by threat-modeling features and services and driving remediation of significant risks.
- Secure the application layer against injection, broken authentication and authorization, and insecure APIs.
- Build and run a secure SDLC, including code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, and pre-production testing.
- Harden authentication, authorization, and session/identity handling across the product.
- Secure AI-specific application surfaces, including model and inference endpoints, prompt and input handling, and emerging generative-AI vulnerabilities.
- Partner with product and platform engineering to design security in early and raise the security bar across the codebase.
- Set standards for how engineering reasons about and ships secure code.

## Requirements
- 6+ years in security engineering with deep, hands-on application-security expertise.
- Strong command of vulnerability classes that cause incidents and how to eliminate them at the source through code, API, and authorization design.
- Experience building AppSec practices and secure-SDLC tooling from the ground up.
- Fluency with modern application stacks and AWS.
- Ability to collaborate closely with engineers without becoming a blocker.
- Ability to write and ship production-quality code, not only review it.
- Curiosity about emerging AI/LLM threat classes and defensive strategies.

## Nice to Have
- Experience with consumer products at scale.
- Secure-by-design experience on generative-AI or ML product surfaces.
- Experience as an early security hire.

## Compensation & Benefits
- Annual compensation of $230,000 to $330,000.
- Company equity package.
- 401(k) with 3% employer match and Roth 401(k).
- Medical, dental, and vision insurance, with PPO, HSA, and FSA options.
- 11 paid holidays, unlimited PTO, and sick time.
- 16 weeks of paid parental leave.
- Creative education stipend.
- Generous commuter allowance.
- In-office lunch five days per week.
- Onsite work at one of the company’s offices.

## Similar roles

- [Staff Detection & Response Engineer](https://hotfix.jobs/jobs/b3c36bb9-6365-411e-a569-911efd6184ea) - Suno - Boston, MA - $230k – $330k/yr
- [Senior Staff Security Engineer - Network Security](https://hotfix.jobs/jobs/b3535b21-0e8c-4e69-aecd-b17494a88ef6) - Gusto - San Francisco, CA - $230k – $270k/yr
- [Staff Security Engineer - SecOps & Threats](https://hotfix.jobs/jobs/62e8a0f4-1c37-4793-82e8-64433efa09a2) - 6sense - Remote - $231k – $266k/yr
- [Staff Product Security Engineer](https://hotfix.jobs/jobs/cd737e9e-c3f6-4183-b501-3803d909819a) - Databricks - Remote - $231k – $398k/yr
- [Staff Application Security Engineer](https://hotfix.jobs/jobs/b3ddeca6-364c-483c-9405-353a2981dd71) - Abridge - San Francisco, CA - $228k – $290k/yr

**Apply:** https://hotfix.jobs/jobs/b6b12f58-c8e6-4a20-87c0-dab0d06212ab
**Canonical:** https://hotfix.jobs/jobs/b6b12f58-c8e6-4a20-87c0-dab0d06212ab