Lead Security Engineer: Cloud, AppSec & IR

Suno; Boston; On-site; PHP 16,707,000 - 23,998,000; Full time

Benefits offered by this job

Company Equity Package

401(k) with 3% Employer Match & Roth 0

Medical, Dental, & Vision Insurance (P

11 Paid Holidays + Unlimited PTO &

16 Weeks of Paid Parental Leave

Creative Education Stipend

Generous Commuter Allowance

In-Office Lunch (5 days per week)

Job summary

Suno is seeking a Lead Security Engineer to build the security foundation across product and infrastructure. This hands-on role requires you to set technical direction, dive into code and the cloud, and mentor a growing team.

You’ll own security architecture, elevate AppSec, drive cloud security, participate in on-call incidents, and shape security processes while collaborating with cross-functional partners.

Qualifications

• 10+ years in security engineering with multi-domain expertise.
• Built security capabilities and set direction, not only operated programs.
• Strong cross-functional partnership to enable safe business operations.
• Nice to have: consumer product at scale, AI/ML abuse exposure, early security hire.

Responsibilities

• Own security architecture and the roadmap across our product and cloud environments.
• Elevate AppSec: secure the SDLC, guardrails for code review, manage dependencies and secrets, pre-production testing.
• Drive cloud security: IAM and least-privilege, account structure, network boundaries and data-access controls.
• Lead incident response and participate in on-call rotations as senior responder.
• Mentor and shape the security team and its processes.

Skills

Security engineering

AppSec

Cloud security

Incident response

Leadership/mentorship

Tools

Code review processes

Cloud infrastructure tooling

Job description

Suno is seeking a Lead Security Engineer to build the security foundation across product and infrastructure. This hands-on role requires you to set technical direction, dive into code and the cloud, and mentor a growing team.

You’ll own security architecture, elevate AppSec, drive cloud security, participate in on-call incidents, and shape security processes while collaborating with cross-functional partners.