Lead Corporate Security Engineer

Join Suno as the Lead Corporate Security Engineer, where you will be the domain expert for securing our Corporate IT environment. You will work closely with colleagues in IT, Business Systems, Security, and Engineering to ensure that our corporate systems are implemented and maintained securely. Your impact will be split between building your team, enabling others, and doing hands-on work to mature our systems, processes, and behaviors. You will own the corporate security domain end to end, set the standard, own the roadmap, and be accountable for the outcome.

• Assurer la sécurité de l'environnement informatique d'entreprise en travaillant en étroite collaboration avec les équipes IT, systèmes d'entreprise, sécurité et ingénierie.
• Développer et mettre en œuvre une feuille de route de sécurité d'entreprise, en définissant les normes et en étant responsable des résultats.
• Diriger les incidents de sécurité d'entreprise, y compris la communication avec les dirigeants, et s'assurer que les leçons apprises entraînent des changements dans le système.

• Helpful, not required: detection engineering, insider risk or DLP programs, zero-trust network access, SOC 2 or ISO program ownership, just-in-time access patterns or identity-as-code, securing AI agent and non-human identity access, prior experience as the first or second security hire at a fast-growing company
• Automation fluency: Python or TypeScript, REST APIs, and a habit of building integrations and internal tooling as a normal part of the job
• A calibrated sense of risk. You know which risks to block on, which to document, and how to tell the difference in public
• ~8+ years in corporate/enterprise security or security engineering, including having owned identity, endpoint, or SaaS security as a domain rather than as a set of tickets
• A track record of setting a security standard that other people applied without you enforcing it — written policy, tooling, defaults, or all three
• Real EDR depth — CrowdStrike preferred — and experience holding a managed detection provider or outsourced SOC to a standard you defined rather than accepting theirs
• Excellent writing and judgment under ambiguity. You can hold a position with an executive and change it when the evidence says to
• Deep hands-on expertise with a modern IdP (Okta preferred) and with IGA or access-governance tooling (Lumos, Veza, ConductorOne, Opal, or similar)
• Endpoint security depth in a macOS-primary fleet: MDM-delivered hardening, compliance and device trust, third-party patch and vulnerability management at scale
• You've designed an entitlement or RBAC model across a large SaaS portfolio and lived with the consequences long enough to know what breaks
• Experience influencing engineering and business teams who don't report to you, early enough in their process to change the outcome
• Strong command of OAuth, SAML, OIDC, and SCIM, and of the risk model behind third-party integrations