Lead Corporate Security Engineer, Suno
$165-220k
+ Offers Equity
More information about location
5 days a week in office
AI music generator
Be an early applicant
AI music generator
201-500 employees
Be an early applicant
$165-220k
+ Offers Equity
More information about location
5 days a week in office
201-500 employees
Company mission
To build a revolutionary creative platform powered by the world's best music model to bring the joy of musical expression to everyone, everywhere.
Role
Who you are
- ~8+ years in corporate/enterprise security or security engineering, including having owned identity, endpoint, or SaaS security as a domain rather than as a set of tickets
- Deep hands-on expertise with a modern IdP (Okta preferred) and with IGA or access-governance tooling (Lumos, Veza, ConductorOne, Opal, or similar)
- You've designed an entitlement or RBAC model across a large SaaS portfolio and lived with the consequences long enough to know what breaks
- Endpoint security depth in a macOS-primary fleet: MDM-delivered hardening, compliance and device trust, third-party patch and vulnerability management at scale
- Real EDR depth — CrowdStrike preferred — and experience holding a managed detection provider or outsourced SOC to a standard you defined rather than accepting theirs
- Strong command of OAuth, SAML, OIDC, and SCIM, and of the risk model behind third-party integrations
- A track record of setting a security standard that other people applied without you enforcing it — written policy, tooling, defaults, or all three
- Experience influencing engineering and business teams who don't report to you, early enough in their process to change the outcome
- Automation fluency: Python or TypeScript, REST APIs, and a habit of building integrations and internal tooling as a normal part of the job
- Excellent writing and judgment under ambiguity. You can hold a position with an executive and change it when the evidence says to
- A calibrated sense of risk. You know which risks to block on, which to document, and how to tell the difference in public
- Helpful, not required: detection engineering, insider risk or DLP programs, zero-trust network access, SOC 2 or ISO program ownership, just-in-time access patterns or identity-as-code, securing AI agent and non-human identity access, prior experience as the first or second security hire at a fast-growing company
What the job involves
- The Lead Corporate Security Engineer will be our domain expert for securing our Corporate IT environment
- You’ll work closely with colleagues in IT, Business Systems, Security, and Engineering to ensure that our corporate systems are implemented and maintained securely
- As a senior member of the team, your impact will be split between building your team, enabling others, and doing hands-on work to mature our systems, processes, and behaviors
- You’ll be building from 0 → 1 in some places and 1 → 10 in others
- What we don't have yet is someone who owns corporate security as a domain — who decides what the bar is, sequences the work to get there, and sees the next problem before it becomes a fire drill
- That's this role
- You'll own the corporate security domain end to end: identity and access governance, endpoint and vulnerability management, detection and response, third-party integration risk, vendor assessment, and SaaS posture
- You'll set the standard, own the roadmap, and be accountable for the outcome
- Our senior IT engineers run the platforms day to day and are your closest partners — you make their work better, not harder
- Ownership splits by layer, not by system. Our senior IT engineers own the run; you own the standard and the direction
- You own the corporate security roadmap. What we secure, in what order, to what bar. You bring it to IT leadership and the CISO aligned, not for arbitration
- IT engineering owns platform operations. Okta, Lumos, Kandji, and the wider SaaS portfolio are administered and integrated by them. You define what those platforms must enforce
- You raise the bar around you. You make your reasoning explicit so IT engineers make good security calls without you in the room, and you build the tooling and defaults that make the secure path the default path
- You're accountable for the outcome, not just the proposal. You decide, you communicate the tradeoff, and you own what happens next
- The people who do well here get their plans stronger by exposing them to the people who run the systems, and they carry the room without needing the org chart to settle it
- Identity and access governance
- Own the access model at Suno: the RBAC and entitlement design, least-privilege defaults, and the governance layer in Lumos that enforces them
- Set the standard for what access review, certification, and approval should look like here — then build toward it rather than importing someone else's framework
- Drive access lifecycle automation so joiner/mover/leaver is correct by default and exceptions are visible
- Get ahead of non-human identity: service accounts, agents, and automations are a growing share of what holds access at Suno, and we need a model for them before it's urgent
- Endpoint security and vulnerability management
- Own the security standard for our fleet: hardening baseline, compliance signals, device trust, and how endpoint posture feeds access decisions
- Own third-party vulnerability management as a program — coverage, risk-based remediation SLAs, reporting, and the negotiation with teams whose tools are the problem
- Partner with the IT engineer who owns Kandji so the standard becomes deployed policy without degrading how people work
- Detection and response
- Own CrowdStrike Falcon Complete and our outsourced SOC relationship: coverage, tuning, escalation quality, and vendor performance against what we actually need
- Define what good detection looks like at Suno and hold the provider to it, rather than accepting their default view of our environment
- Lead corporate security incidents to closure, including the executive communication, and make sure what we learn changes the system rather than just the ticket
- Third-party and integration risk
- Own how Suno evaluates third-party access: integration and OAuth review for Slack, Google Workspace and the rest of the portfolio, plus vendor security assessment at purchase and renewal
- Define our risk appetite in practice, in partnership with the CISO, and make it legible enough that others apply it without you
- Turn recurring decisions into policy, scope guidance, and tooling so the review queue shrinks as the company grows
- SaaS security posture
- Build and own the program: the bar for our SaaS applications, the assessment cadence, and the remediation that follows
- Improve tenant-level configuration across the portfolio — SSO and SCIM coverage, MFA and session policy, admin role hygiene, OAuth grant and token management, data sharing defaults
- Cross-functional leadership
- Work with IT, Security, Engineering, AI Enablement, and Legal to shape how Suno builds and buys, early enough to matter
- Influence the scope of what comes next: how our future GRC function plugs in, what we automate versus staff, where the next investment goes
- Mentor and raise the technical bar for people around you, including IT engineers who aren't security specialists
- What success looks like
- First 90 days: you've formed your own view of our security posture, built working relationships with the IT engineers and the SOC, and told us the three things we're wrong about
- First 6 months: a corporate security roadmap exists that IT and the CISO are aligned behind, with the sequencing and the tradeoffs made explicit; the highest-risk items are already moving
- First year: entitlement sprawl and vulnerability backlog are measurably down, detection reflects our real risks, third-party review is fast enough that nobody routes around it, and the standard holds because it's built into tooling and shared judgment rather than into you
Our take
Suno is a company leveraging AI for music creation, attempting to make it accessible to everyone, regardless of their musical background. The platform allows users to generate complete songs by inputting text prompts, breaking down the barriers that traditionally separate amateurs from professional musicians.
Unlike other AI music tools, Suno focuses on ease-of-use, enabling even those with no music theory knowledge to produce professional-sounding songs. This approach has already attracted a diverse user base, including everyday people and GRAMMY-winning artists.
Whether the vision sits comfortably with the wider music community is another matter. For many, AI-generated music still raises ethical questions around ownership and the value of human artistry. But with investors continuing to back Suno with hundreds of millions of dollars, it's clear they believe AI music is here to stay.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 3 rounds)
Jun 2026
$400m
SERIES D
Nov 2025
$250m
SERIES C
Total funding: $775m
Company benefits
- Retirement Match: Suno offers a Traditional 401(k) plan and Roth 401(k) plan with a 3% Safe Harbor company match.
- Medical, Dental & Vision: We offer competitive medical, dental, vision insurance for employees and dependents.
- Lunch Program: Suno offers free lunch 5 days a week in each of our office locations.
- Commuter Benefit: Generous monthly stipend for commuting expenses.
- Time Off: Suno employees are provided with unlimited paid time off as well as unlimited sick days + 11 company holidays.
- Creative Education Stipend: Annual reimbursements for creative education and development.
- Parental Leave: 16 weeks of fully paid parental leave to both birthing and non-birthing parents.
Company HQ
Mid-Cambridge, Cambridge, MA
Leadership
Mikey Shulman
(Co-Founder & CEO)Mikey is currently a Lecturer at MIT Sloan School of Management, a role they have held since 2018. Previously, they were the Head of Machine Learning at Kensho Technologies.
Georg Kucsko
(Co-Founder & CTO)Georg previously worked at MIT Sloan School of Management at a Lecturer. They also served as the Head of AI Research at Kensho Technologies.
Martin Camacho
(Co-Founder & President)Prior to co-founding Suno in 2022, Martin was the Head of Engineering at Firefly Health. Before that, they were the first employee at Kensho Technologies, spending nearly 6 years there as a Chief Architect and Board Director.
Keenan Freyberg
(Co-Founder & COO)Keenan is also the co-founder of Lakehold where they serve as a General Partner. Previously, they spent nearly 4 years at Kensho Technologies working in Client Operations, Product Management and Strategic Initiatives. They also worked at Capco as an Associate and at Pinshape as a Business Developer.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 53 more jobs at Suno