Lead Security Engineer: Architect Secure Cloud & AppSec

suno; Boston (MA); On-site; USD 275,000 - 395,000; Full time

Benefits offered by this job

Equity package

401(k) match

Medical insurance

11 paid holidays + unlimited PTO & 16

Paid parental leave

Education stipend

Commuter allowance

In-office lunch

Job summary

Suno is seeking a Lead Security Engineer to build the security foundation across our product and infrastructure. This is a hands-on role: you’ll set technical direction for security across our product and infrastructure, go deep in the code and the cloud yourself, and help shape the team that grows around you.

You will own security architecture and the roadmap, driving threat modeling and elevating AppSec practices, with responsibilities in on-call incident response and mentoring the security

Qualifications

• 10+ years in security engineering.
• Deep expertise in at least two areas (AppSec, cloud, IR).
• Builder who creates security capabilities and sets direction.
• Strong cross-functional partnership to enable safe business operations.

Responsibilities

• Own security architecture and roadmaps across product and cloud.
• Elevate AppSec practices: secure the SDLC, code-review guardrails, dependencies and secrets, pre-production testing.
• Drive cloud security: IAM and least-privilege, account structure, network boundaries, and data-access controls.
• Lead incident response and participate in on-call rotation.
• Mentor and shape the security team and processes.

Skills

Security architecture

Cloud security

Incident response

Security leadership

Cross-functional collaboration

Job description

Suno is seeking a Lead Security Engineer to build the security foundation across our product and infrastructure. This is a hands-on role: you’ll set technical direction for security across our product and infrastructure, go deep in the code and the cloud yourself, and help shape the team that grows around you.

You will own security architecture and the roadmap, driving threat modeling and elevating AppSec practices, with responsibilities in on-call incident response and mentoring the security