Senior / Staff Infrastructure Security Engineer

We're building the world's first creative entertainment platform, where the entire world can feel the joy and fulfillment of making music. Music is for everyone: Our users include everyone from grandmothers creating songs for their loved ones, to Grammy winners using Suno Studio, our power tool, to make the most popular hits in the world.

Building the future of entertainment requires ambition. The pace is fast, the problems are hard, and the work demands ownership and intensity. For the right people, it’s incredibly rewarding: a chance to shape a new medium, work with a small team that cares deeply about quality, make music, drink too much coffee, and build something that millions of people use to express themselves in ways that were never before possible.

Suno is the fastest growing consumer entertainment company and the leader in AI music. We are backed by leading investors including Bond Capital, Menlo Ventures, Lightspeed Venture Partners, IVP, Forerunner, Union Square Ventures, Alkeon, Quiet, Matrix Partners, Schroders Capital and, NVentures (venture arm of NVIDIA).

We’re looking for a Senior or Staff Infrastructure Security Engineer to secure the cloud that runs Suno. That covers our Kubernetes clusters, the GPU compute behind our AI workloads, and the network that connects them. You’ll report to our Security Lead, work closely with Platform Engineering, and partner with AppSec engineers and our Detection & Response team as they grow alongside you. This is a building job. You’ll write threat models, set hardened defaults, and create paved paths that engineers actually want to use. Some of the work is familiar cloud security. Some of it, like securing AI infrastructure, is new for everyone.

Check out the Suno version of this role here: https://suno.com/s/Utj2JDlLzR4Dvs3p

• →

  Build Suno’s infrastructure threat model across cloud, Kubernetes, GPU compute platforms, and networking, and use it with the Security Lead to decide where to focus first.

• →

  Harden our EKS clusters, GPU compute environments, and infrastructure-as-code pipeline, including who can change infrastructure and how.

• →

  Design paved paths and secure defaults, such as trusted base images, network segmentation, and scoped access, and ship the fixes yourself rather than handing off a list of findings.

• →

  Define the infrastructure detections and alerts we need beyond out-of-the-box tooling, working with Detection & Response, and be the expert they call when those alerts fire.

• →

  Partner with Platform Engineering and the broader engineering org to land changes in a fast-moving environment, and help shape a growing Security team.

• →

  Protect the systems that let millions of people make music, so creative fulfillment can be part of everyone’s day.

• At least 7 years of experience in infrastructure security or adjacent fields.

• An engineering background building secure-by-default tooling and paved paths, not primarily running scans and reporting findings.

• Hands-on depth in cloud-native security (AWS preferred; GCP or Azure are fine), plus Kubernetes and container security, including image provenance and software supply chain security, or the ability to learn them quickly.

• Strong enough coding skills to build your own tooling and implement fixes without needing another engineer to carry them out.

• End-to-end ownership of security projects, with the comfort to build in a greenfield environment where structure is still taking shape.

• A collaborative working style and genuine interest in learning how to secure AI infrastructure.

• Experience rolling out a cloud security posture management (CSPM) platform.

• Experience securing AI or GPU compute platforms, or serverless container environments.

• Experience building or maintaining the pipeline other engineers use to deploy infrastructure-as-code, such as plan/apply approvals, state management, or policy checks.

This role is expected to work from the designated Suno office 5 days a week, per Suno's company policy. Full-time employees will receive competitive equity packages, and comprehensive benefits. The actual base salary offered may vary depending on location, skills, qualifications, and experience.

Applicants must be eligible to work in the US.