Senior / Staff Infrastructure Security Engineer
Suno
NYCPosted 3 days agoDiscoveredMatch locked
FullTime7+ years expEngineering
About Suno
We're building the world's first creative entertainment platform, where the entire world can feel the joy and fulfillment of making music. Music is for everyone: Our users include everyone from grandmothers creating songs for their loved ones, to Grammy winners using Suno Studio, our power tool, to make the most popular hits in the world.
Building the future of entertainment requires ambition. The pace is fast, the problems are hard, and the work demands ownership and intensity. For the right people, it's incredibly rewarding: a chance to shape a new medium, work with a small team that cares deeply about quality, make music, drink too much coffee, and build something that millions of people use to express themselves in ways that were never before possible.
Suno is the fastest growing consumer entertainment company and the leader in AI music. We are backed by leading investors including Bond Capital, Menlo Ventures, Lightspeed Venture Partners, IVP, Forerunner, Union Square Ventures, Alkeon, Quiet, Matrix Partners, Schroders Capital and, NVentures (venture arm of NVIDIA).
About the Role
We're looking for a Senior or Staff Infrastructure Security Engineer to secure the cloud that runs Suno. That covers our Kubernetes clusters, the GPU compute behind our AI workloads, and the network that connects them. You'll report to our Security Lead, work closely with Platform Engineering, and partner with AppSec engineers and our Detection & Response team as they grow alongside you. This is a building job. You'll write threat models, set hardened defaults, and create paved paths that engineers actually want to use. Some of the work is familiar cloud security. Some of it, like securing AI infrastructure, is new for everyone.
Check out the Suno version of this role here: https://suno.com/s/Utj2JDlLzR4Dvs3p
What You'll Do
- Build Suno's infrastructure threat model across cloud, Kubernetes, GPU compute platforms, and networking, and use it with the Security Lead to decide where to focus first.
- Harden our EKS clusters, GPU compute environments, and infrastructure-as-code pipeline, including who can change infrastructure and how.
- Design paved paths and secure defaults, such as trusted base images, network segmentation, and scoped access, and ship the fixes yourself rather than handing off a list of findings.
- Define the infrastructure detections and alerts we need beyond out-of-the-box tooling, working with Detection & Response, and be the expert they call when those alerts fire.
- Partner with Platform Engineering and the broader engineering org to land changes in a fast-moving environment, and help shape a growing Security team.
- Protect the systems that let millions of people make music, so creative fulfillment can be part of everyone's day.
Must-Haves
- At least 7 years of experience in infrastructure security or adjacent fields.
- An engineering background building secure-by-default tooling and paved paths, not primarily running scans and reporting findings.
- Hands-on depth in cloud-native security (AWS preferred; GCP or Azure are fine), plus Kubernetes and container security, including image provenance and software supply chain security, or the ability to learn them quickly.
- Strong enough coding skills to build your own tooling and implement fixes without needing another engineer to carry them out.
- End-to-end ownership of security projects, with the comfort to build in a greenfield environment where structure is still taking shape.
- A collaborative working style and genuine interest in learning how to secure AI infrastructure.
Nice-to-Haves
- Experience rolling out a cloud security posture management (CSPM) platform.
- Experience securing AI or GPU compute platforms, or serverless container environments.
- Experience building or maintaining the pipeline other engineers use to deploy infrastructure-as-code, such as plan/apply approvals, state management, or policy checks.
Work Location Policy
This role is expected to work from the designated Suno office 5 days a week, per Suno's company policy. Full-time employees will receive competitive equity packages, and comprehensive benefits. The actual base salary offered may vary depending on location, skills, qualifications, and experience.
Additional Notes
Applicants must be eligible to work in the US.
Perks & Benefits for Full-Time Employees
- Company Equity Package
- 401(k) with 3% Employer Match & Roth 401(k)
- Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)
- 11 Paid Holidays + Unlimited PTO & Sick Time
- 16 Weeks of Paid Parental Leave
- Creative Education Stipend
- Generous Commuter Allowance
- In-Office Lunch (5 days per week)
Compensation
- The annual salary range for this role is $276,960 - $363,510 + target equity + benefits (including medical, dental, vision, and 401k)
Suno is proud to be an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, genetic information, veteran status, or any other legally protected basis under provincial, federal, state, and local laws, regulations, or ordinances. We will also consider qualified applicants with criminal histories in a manner consistent with the requirements of state and local laws, including the Massachusetts Fair Chance in Employment Act, NYC Fair Chance Act, LA City Fair Chance Ordinance, and San Francisco Fair Chance Ordinance.
Not included in the source posting: qualifications.
Skills
artificial-intelligencekubernetesapplication-securityawsazureexpressgcpserverless
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.