Senior / Staff Infrastructure Security Engineer, Suno

• At least 7 years of experience in infrastructure security or adjacent fields
• An engineering background building secure-by-default tooling and paved paths, not primarily running scans and reporting findings
• Hands-on depth in cloud-native security (AWS preferred; GCP or Azure are fine), plus Kubernetes and container security, including image provenance and software supply chain security, or the ability to learn them quickly
• Strong enough coding skills to build your own tooling and implement fixes without needing another engineer to carry them out
• End-to-end ownership of security projects, with the comfort to build in a greenfield environment where structure is still taking shape
• A collaborative working style and genuine interest in learning how to secure AI infrastructure

Desirable

• We’re looking for a Senior or Staff Infrastructure Security Engineer to secure the cloud that runs Suno
• That covers our Kubernetes clusters, the GPU compute behind our AI workloads, and the network that connects them
• You’ll report to our Security Lead, work closely with Platform Engineering, and partner with AppSec engineers and our Detection & Response team as they grow alongside you
• This is a building job
• You’ll write threat models, set hardened defaults, and create paved paths that engineers actually want to use
• Some of the work is familiar cloud security
• Some of it, like securing AI infrastructure, is new for everyone
• Build Suno’s infrastructure threat model across cloud, Kubernetes, GPU compute platforms, and networking, and use it with the Security Lead to decide where to focus first
• Harden our EKS clusters, GPU compute environments, and infrastructure-as-code pipeline, including who can change infrastructure and how
• Design paved paths and secure defaults, such as trusted base images, network segmentation, and scoped access, and ship the fixes yourself rather than handing off a list of findings
• Define the infrastructure detections and alerts we need beyond out-of-the-box tooling, working with Detection & Response, and be the expert they call when those alerts fire
• Partner with Platform Engineering and the broader engineering org to land changes in a fast-moving environment, and help shape a growing Security team
• Protect the systems that let millions of people make music, so creative fulfillment can be part of everyone’s day