Senior / Staff Infrastructure Security Engineer

Join Suno, a company dedicated to making creative fulfillment a part of everyone's day. As a Senior/Staff Infrastructure Security Engineer, you will be responsible for securing the cloud infrastructure that powers our AI workloads. You will work closely with the Security Lead, Platform Engineering, and AppSec engineers, and have the opportunity to shape a growing Security team. This is a building job where you will write threat models, set hardened defaults, and create paved paths for engineers to follow. You will also have access to a range of benefits, including a retirement match, medical, dental, and vision insurance, a commuter benefit, free lunch, unlimited paid time off, a creative education stipend, and parental leave.

• Construire le modèle de menace de l'infrastructure de Suno, en se concentrant sur le cloud, Kubernetes, les environnements de calcul GPU et le réseau.
• Renforcer les clusters EKS, les environnements de calcul GPU et le pipeline d'infrastructure en tant que code, y compris les contrôles d'accès.
• Définir les détections et alertes d'infrastructure nécessaires au-delà des outils standard, en travaillant avec l'équipe de détection et de réponse.

• At least 7 years of experience in infrastructure security or adjacent fields
• Strong enough coding skills to build your own tooling and implement fixes without needing another engineer to carry them out
• Hands-on depth in cloud-native security (AWS preferred; GCP or Azure are fine), plus Kubernetes and container security, including image provenance and software supply chain security, or the ability to learn them quickly
• A collaborative working style and genuine interest in learning how to secure AI infrastructure
• End-to-end ownership of security projects, with the comfort to build in a greenfield environment where structure is still taking shape
• An engineering background building secure-by-default tooling and paved paths, not primarily running scans and reporting findings
• Experience rolling out a cloud security posture management (CSPM) platform
• Experience securing AI or GPU compute platforms, or serverless container environments
• Experience building or maintaining the pipeline other engineers use to deploy infrastructure-as-code, such as plan/apply approvals, state management, or policy checks