Lead Security Engineer

📋 Job Overview

We're building the world's first creative entertainment platform, where the entire world can feel the joy and fulfillment of making music. Music is for everyone: Our users include everyone from grandmothers creating songs for their loved ones, to Grammy winners using Suno Studio, our power tool, to make the most popular hits in the world.

Building the future of entertainment requires ambition. The pace is fast, the problems are hard, and the work demands ownership and intensity. For the right people, it’s incredibly rewarding: a chance to shape a new medium, work with a small team that cares deeply about quality, make music, drink too much coffee, and build something that millions of people use to express themselves in ways that were never before possible.

Suno is the fastest growing consumer entertainment company and the leader in AI music. We are backed by leading investors including Bond Capital, Menlo Ventures, Lightspeed Venture Partners, IVP, Forerunner, Union Square Ventures, Alkeon, Quiet, Matrix Partners, Schroders Capital and, NVentures (venture arm of NVIDIA).

🏢 About Suno

We’re looking for a Lead Security Engineer to help build the security foundation. This is a hands-on role: you’ll set technical direction for security across our product and infrastructure, go deep in the code and the cloud yourself, and help shape the team that grows around you.

🎯 The Role

Own security architecture and the roadmap across our product and cloud environments, threat-modeling to focus effort where it matters most.

✅ Key Responsibilities

• Elevate our AppSec practice: secure the SDLC, establish code-review guardrails, manage dependencies and secrets, and implement pre-production security testing.
• Drive cloud security: IAM and least-privilege, account structure, network boundaries, and data-access controls.
• Lead incident response. This role requires participation in an on-call rotation and acting as the senior responder during incidents.
• Mentor and shape the security team and its operational processes.

📌 Required Qualifications

• 10+ years in security engineering, with deep expertise in at least two of AppSec, cloud/infrastructure security, and IR, and credibility in the third.
• A builder: you’ve created security capabilities and set direction, not only operated established programs.
• Strong cross-functional partnership skills — security should enable the business to build and operate safely.

⭐ Desirable Experience

• Consumer product at scale, AI/ML abuse or model-security exposure, experience as an early or founding security hire.

🎁 Benefits

• Company Equity Package
• 401(k) with 3% Employer Match & Roth 401(k)
• Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)
• 11 Paid Holidays + Unlimited PTO & Sick Time
• 16 Weeks of Paid Parental Leave
• Creative Education Stipend
• Generous Commuter Allowance
• In-Office Lunch (5 days per week)

🛂 Visa & Eligibility

Applicants must be eligible to work in the US. This role requires working onsite at one of our three offices.