Sr. Staff Threat Intelligence Engineer

ABOUT THE ROLE

As our Sr. Staff Threat Intelligence Engineer, you’ll lead Suno’s work to understand and counter the adversaries targeting our platform, our users, and our business across security, trust & safety, and fraud. You’ll identify who is targeting Suno and how they operate, and turn that understanding into defenses across the company. Your analysis will shape how our security, T&S, and fraud teams prioritize risk and invest in protections. Your technical depth will make sure those recommendations hold up in our systems. This is a high-leverage role that will define how Suno anticipates and responds to emerging threats as the platform grows

WHAT YOU'LL DO

- Investigate the threat actors and campaigns targeting Suno, from account takeovers and payment fraud to coordinated platform abuse, and connect activity across all three areas.

- Analyze large-scale event and account data with Python and SQL to find patterns, link related activity, and size emerging threats.

- Translate adversary tactics into concrete countermeasures, recommending detection, product, and architecture changes that engineering teams can build.

- Brief security, T&S, and fraud leaders with intelligence ranging from quick situational updates to deeper strategic assessments.

- Raise the bar for the team by setting standards for collection, analysis, and tradecraft as the threat intelligence function grows.

- Protect the community creating on Suno, so making music stays safe, fun, and open to everyone

WHAT YOU'LL NEED

MUST-HAVES

- 10+ years of experience in threat intelligence, with significant depth in at least two of security, trust & safety, and fraud.

- Strong threat intelligence fundamentals: tracking threat actors, attributing campaigns to them, OSINT, and linking related accounts and infrastructure.

- Hands-on data skills: Python scripting and SQL against large datasets to drive your own investigations.

- Technical fluency in modern web and cloud architecture. You need to understand how an attack works and how to break it, without needing to ship production code yourself.

- A track record of influencing engineering, product, and leadership teams that don't report to you, and turning findings into action

NICE-TO-HAVES

- Experience with generative AI misuse, such as account farming, API or reseller abuse, or automated content abuse.

- Background at a consumer platform or a company built on user-generated content.

- Experience partnering with engineers to design detection rules and abuse signals.

- Familiarity with threat intelligence platforms or graph analysis tools.

WORK LOCATION POLICY

This role is expected to work from the designated Suno office 5 days a week, per Suno's company policy. Full-time employees will receive competitive equity packages, and comprehensive benefits. The actual base salary offered may vary depending on location, skills, qualifications, and experience.

ADDITIONAL NOTES

Applicants must be eligible to work in the US.

PERKS & BENEFITS FOR FULL-TIME EMPLOYEES

- Company Equity Package

- 401(k) with 3% Employer Match & Roth 401(k)

- Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)

- 11 Paid Holidays + Unlimited PTO & Sick Time

- 16 Weeks of Paid Parental Leave

- Creative Education Stipend

- Generous Commuter Allowance

- In-Office Lunch (5 days per week)

COMPENSATION:

- The annual salary range for this role is $316,080 - $414,855 + target equity + benefits (including medical, dental, vision, and 401k)