← All roles

Lead Corporate Security Engineer

Suno· Engineering
Apply on company site
Boston, NYC$165k - $220kFull-timePosted 3w ago

About the role

Lead the corporate security domain for Suno, owning identity access governance, endpoint and vulnerability management, detection and response, third-party integration risk, vendor assessment, and SaaS posture. Build the security standard, roadmap, and tooling while mentoring others and collaborating with IT, Security, Engineering, AI Enablement, and Legal.

Responsibilities

  • Own the access model at Suno: the RBAC and entitlement design, least-privilege defaults, and the governance layer in Lumos that enforces them
  • Set the standard for access review, certification, and approval; drive automation for joiner/mover/leaver workflows
  • Manage non-human identity (service accounts, agents, automations) by modeling and governance
  • Own the security standard for the fleet: hardening baseline, compliance signals, device trust, and how endpoint posture feeds access decisions
  • Lead third-party vulnerability management program: coverage, risk-based remediation SLAs, reporting, and cross-team coordination
  • Partner with IT engineer owning Kandji to deploy standards as policy without hindering work
  • Own the EDR deployment and maintenance; collaborate on corporate security incidents with Detection and Response
  • Define how Suno evaluates third-party access (Slack, Google Workspace, OAuth reviews); conduct vendor security assessments at purchase/renewal
  • Build and own SaaS security posture program: SaaS app bar, assessment cadence, remediation; enhance tenant-level configuration (SSO, SCIM, MFA, OAuth, data sharing defaults)
  • Provide cross-functional leadership with IT, Security, Engineering, AI Enablement, and Legal; mentor colleagues and shape GRC integration

Qualifications

  • ~8+ years in corporate/enterprise security or security engineering with domain ownership of identity, endpoint, or SaaS security
  • Deep hands-on expertise with a modern IdP and IGA tooling (Lumos, Veza, ConductorOne, Opal, or similar)
  • Experience designing entitlement/RBAC models across a large SaaS portfolio
  • Endpoint security depth for macOS fleets (MDM-delivered hardening, device trust, vulnerability management)
  • Strong knowledge of OAuth, SAML, OIDC, SCIM; risk model for third-party integrations
  • Track record of setting security standards with policy, tooling, and defaults
  • Ability to influence engineering/business teams outside direct reporting lines; process-oriented
  • Automation fluency (Python or TypeScript, REST APIs); building integrations and internal tooling

Skills

Required:Identity and access governanceEndpoint securitySaaS securityOAuth, SAML, OIDC, SCIM

Benefits

  • Company Equity Package
  • 401(k) with 3% Employer Match & Roth 401(k)
  • Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)
  • 11 Paid Holidays + Unlimited PTO & Sick Time
  • 16 Weeks of Paid Parental Leave
  • Creative Education Stipend
  • Generous Commuter Allowance
  • In-Office Lunch (5 days per week)
Last updated Oct 8, 2026. Interested? Apply on the company site.

About Suno

Create stunning original music for free in seconds using AI.

Create stunning original music for free in seconds using AI. Make your own masterpieces, share with friends, and discover music from artists worldwide.

AI MusicMusic CreationMusic GenerationMusic Sharingai-plg-top-20liquid-ai-recruiting-target
Company profileWebsite

More open roles at Suno