Senior / Staff Infrastructure Security Engineer

ABOUT THE ROLE

We’re looking for a Senior or Staff Infrastructure Security Engineer to secure the cloud that runs Suno. That covers our Kubernetes clusters, the GPU compute behind our AI workloads, and the network that connects them. You’ll report to our Security Lead, work closely with Platform Engineering, and partner with AppSec engineers and our Detection & Response team as they grow alongside you. This is a building job. You’ll write threat models, set hardened defaults, and create paved paths that engineers actually want to use. Some of the work is familiar cloud security. Some of it, like securing AI infrastructure, is new for everyone.

Check out the Suno version of this role here: https://suno.com/s/Utj2JDlLzR4Dvs3p

WHAT YOU'LL DO

- Build Suno’s infrastructure threat model across cloud, Kubernetes, GPU compute platforms, and networking, and use it with the Security Lead to decide where to focus first.

- Harden our EKS clusters, GPU compute environments, and infrastructure-as-code pipeline, including who can change infrastructure and how.

- Design paved paths and secure defaults, such as trusted base images, network segmentation, and scoped access, and ship the fixes yourself rather than handing off a list of findings.

- Define the infrastructure detections and alerts we need beyond out-of-the-box tooling, working with Detection & Response, and be the expert they call when those alerts fire.

- Partner with Platform Engineering and the broader engineering org to land changes in a fast-moving environment, and help shape a growing Security team.

- Protect the systems that let millions of people make music, so creative fulfillment can be part of everyone’s day.

WHAT YOU'LL NEED

MUST-HAVES

- At least 7 years of experience in infrastructure security or adjacent fields.

- An engineering background building secure-by-default tooling and paved paths, not primarily running scans and reporting findings.

- Hands-on depth in cloud-native security (AWS preferred; GCP or Azure are fine), plus Kubernetes and container security, including image provenance and software supply chain security, or the ability to learn them quickly.

- Strong enough coding skills to build your own tooling and implement fixes without needing another engineer to carry them out.

- End-to-end ownership of security projects, with the comfort to build in a greenfield environment where structure is still taking shape.

- A collaborative working style and genuine interest in learning how to secure AI infrastructure.

NICE-TO-HAVES

- Experience rolling out a cloud security posture management (CSPM) platform.

- Experience securing AI or GPU compute platforms, or serverless container environments.

- Experience building or maintaining the pipeline other engineers use to deploy infrastructure-as-code, such as plan/apply approvals, state management, or policy checks.

WORK LOCATION POLICY

This role is expected to work from the designated Suno office 5 days a week, per Suno's company policy. Full-time employees will receive competitive equity packages, and comprehensive benefits. The actual base salary offered may vary depending on location, skills, qualifications, and experience.

ADDITIONAL NOTES

Applicants must be eligible to work in the US.

PERKS & BENEFITS FOR FULL-TIME EMPLOYEES

- Company Equity Package

- 401(k) with 3% Employer Match & Roth 401(k)

- Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)

- 11 Paid Holidays + Unlimited PTO & Sick Time

- 16 Weeks of Paid Parental Leave

- Creative Education Stipend

- Generous Commuter Allowance

- In-Office Lunch (5 days per week)

COMPENSATION:

- The annual salary range for this role is $276,960 - $363,510 + target equity + benefits (including medical, dental, vision, and 401k)