About this role
Professionals who thrive in fast-paced environments and enjoy taking full ownership of corporate security domains will find this role a strong match. Suno operates an AI music platform based in Boston and requires a Lead Corporate Security Engineer to secure the corporate IT environment. The person in this position acts as the domain expert, dividing time between building the team, enabling colleagues, and performing hands-on security work.
Collaboration happens daily with IT, Business Systems, Security, and Engineering teams to ensure systems are implemented and maintained securely. Responsibilities include defining the corporate security roadmap, owning identity and access governance, managing endpoints, and establishing SaaS security posture standards. Success involves reducing vulnerability backlogs, automating access lifecycles, and creating secure defaults that allow the business to scale smoothly.
What you will do
- Lead the corporate security domain end-to-end, covering identity governance, endpoint security, vulnerability management, and detection response.
- Define and drive the access model at Suno, including RBAC and entitlement design, least-privilege defaults, and access lifecycle automation.
- Own the security standard for a macOS-primary fleet, managing hardening baselines, compliance signals, and third-party vulnerability remediation SLAs.
- Direct third-party and integration risk assessments, evaluating OAuth reviews and vendor security across the SaaS portfolio.
- Collaborate cross-functionally with IT, Security, Engineering, AI Enablement, and Legal to shape security practices.
- Build internal tooling and write clear policies that enable partners to make secure decisions independently.
What you need
- Bring approximately 8 or more years of experience in corporate security, enterprise security, or security engineering.
- Possess deep hands-on expertise with modern identity providers and access-governance tooling such as Lumos, Veza, ConductorOne, or Opal.
- Demonstrate experience designing entitlement or role-based access control models across a large SaaS portfolio.
- Show endpoint security depth in a macOS-primary fleet, including MDM-delivered hardening and patch management.
- Maintain strong command of OAuth, SAML, OIDC, SCIM, and third-party integration risk models.
- Exemplify automation fluency using Python or TypeScript, REST APIs, and internal tooling development.
Nice to have
- Insider risk or DLP programs
- Zero-trust network access
- SOC 2 or ISO program ownership
- Just-in-time access patterns or identity-as-code
- Securing AI agent and non-human identity access
Benefits
- Offers Equity
Skills and tech stack
Questions candidates ask
Where is this role located?
The position is based in Boston.
What is the compensation for this role?
The salary ranges from $165K to $220K and includes offers of equity.
What level is this position?
This is an L6 individual contributor role.
Who will be the closest partners for this role?
IT Engineering runs the platforms day to day and serves as your closest partner, alongside colleagues in Business Systems, Security, and Engineering.