Senior / Staff Infrastructure Security Engineer

Suno•New York, NY

2d•$276,960 - $363,510•Onsite

About The Position

We’re looking for a Senior or Staff Infrastructure Security Engineer to secure the cloud that runs Suno. That covers our Kubernetes clusters, the GPU compute behind our AI workloads, and the network that connects them. You’ll report to our Security Lead, work closely with Platform Engineering, and partner with AppSec engineers and our Detection & Response team as they grow alongside you. This is a building job. You’ll write threat models, set hardened defaults, and create paved paths that engineers actually want to use. Some of the work is familiar cloud security. Some of it, like securing AI infrastructure, is new for everyone.

Requirements

At least 7 years of experience in infrastructure security or adjacent fields.
An engineering background building secure-by-default tooling and paved paths, not primarily running scans and reporting findings.
Hands-on depth in cloud-native security (AWS preferred; GCP or Azure are fine), plus Kubernetes and container security, including image provenance and software supply chain security, or the ability to learn them quickly.
Strong enough coding skills to build your own tooling and implement fixes without needing another engineer to carry them out.
End-to-end ownership of security projects, with the comfort to build in a greenfield environment where structure is still taking shape.
A collaborative working style and genuine interest in learning how to secure AI infrastructure.

Nice To Haves

Experience rolling out a cloud security posture management (CSPM) platform.
Experience securing AI or GPU compute platforms, or serverless container environments.
Experience building or maintaining the pipeline other engineers use to deploy infrastructure-as-code, such as plan/apply approvals, state management, or policy checks.

Responsibilities

Build Suno’s infrastructure threat model across cloud, Kubernetes, GPU compute platforms, and networking, and use it with the Security Lead to decide where to focus first.
Harden our EKS clusters, GPU compute environments, and infrastructure-as-code pipeline, including who can change infrastructure and how.
Design paved paths and secure defaults, such as trusted base images, network segmentation, and scoped access, and ship the fixes yourself rather than handing off a list of findings.
Define the infrastructure detections and alerts we need beyond out-of-the-box tooling, working with Detection & Response, and be the expert they call when those alerts fire.
Partner with Platform Engineering and the broader engineering org to land changes in a fast-moving environment, and help shape a growing Security team.
Protect the systems that let millions of people make music, so creative fulfillment can be part of everyone’s day.