Senior Detection & Response Engineer — Telemetry & IR

Suno; Boston; On-site; PHP 13,973,000 - 20,049,000; Full time

Benefits offered by this job

Equity

401(k) plan

Medical/Dental/Vision insurance

11 Paid holidays

Parental leave (16 weeks)

Education stipend

Commuter allowance

In-office lunch

Job summary

Suno is seeking a Senior/Staff Detection & Response Engineer to design, own, and evolve our threat detection and response across the environment. You will build the telemetry pipeline, craft high-signal detections, and run incident response while partnering with security and platform teams.

You’ll guide detection-as-code practices, set metrics, and expand detection for AI-related abuse as threats emerge. This is a hands-on, leadership-heavy role located onsite at our offices.

Qualifications

• 6+ years in detection and response; proven ability to set direction.
• Strong AWS-native detection depth across CloudTrail and GuardDuty.
• Engineering-first mindset with detection-as-code practice.
• Calm, structured, and decisive during live incidents.
• Interest in AI/ML abuse and evolving threat patterns.
• Nice to have: experience with consumer-scale product security.

Responsibilities

• Design and own detection and telemetry pipeline, including logging coverage.
• Write high-signal detections aligned to major breach paths (identity, access, cloud control plane, data exfiltration).
• Build and own incident response—playbooks, on-call, live response, post-incident reviews.
• Partner with security and platform engineering to close telemetry gaps.
• Set the bar for detection-as-code and metrics-driven response.
• Develop detections for AI-specific abuse and novel attack patterns.
• Leverage AI to augment focus on critical, high-skill work.

Skills

Detection & Response

AWS-native detection

Detection-as-code

Incident response

AI/ML abuse awareness

Tools

CloudTrail

GuardDuty

Job description

Suno is seeking a Senior/Staff Detection & Response Engineer to design, own, and evolve our threat detection and response across the environment. You will build the telemetry pipeline, craft high-signal detections, and run incident response while partnering with security and platform teams.

You’ll guide detection-as-code practices, set metrics, and expand detection for AI-related abuse as threats emerge. This is a hands-on, leadership-heavy role located onsite at our offices.