Suno Sr. Staff Threat Intelligence Engineer at Suno leads efforts to understand and counter adversaries targeting the platform, users, and business. The role involves analyzing threat data, translating tactics into defenses, and briefing leadership.
Responsibilities
As our Sr. Staff Threat Intelligence Engineer, you’ll lead Suno’s work to understand and counter the adversaries targeting our platform, our users, and our business across security, trust & safety, and fraud. You’ll identify who is targeting Suno and how they operate, and turn that understanding into defenses across the company. Your analysis will shape how our security, T&S, and fraud teams prioritize risk and invest in protections. Your technical depth will make sure those recommendations hold up in our systems. This is a high-leverage role that will define how Suno anticipates and responds to emerging threats as the platform grows
Investigate the threat actors and campaigns targeting Suno, from account takeovers and payment fraud to coordinated platform abuse, and connect activity across all three areas.
Analyze large-scale event and account data with Python and SQL to find patterns, link related activity, and size emerging threats.
Translate adversary tactics into concrete countermeasures, recommending detection, product, and architecture changes that engineering teams can build.
Brief security, T&S, and fraud leaders with intelligence ranging from quick situational updates to deeper strategic assessments.
Raise the bar for the team by setting standards for collection, analysis, and tradecraft as the threat intelligence function grows.
Protect the community creating on Suno, so making music stays safe, fun, and open to everyone
Qualification
Strong threat intelligence fundamentalsHands-on data skillsExperience with generative AI misuseWork Location PolicyAdditional Notes
Required
10+ years of experience in threat intelligence, with significant depth in at least two of security, trust & safety, and fraud.
Strong threat intelligence fundamentals: tracking threat actors, attributing campaigns to them, OSINT, and linking related accounts and infrastructure.
Hands-on data skills: Python scripting and SQL against large datasets to drive your own investigations.
Technical fluency in modern web and cloud architecture. You need to understand how an attack works and how to break it, without needing to ship production code yourself.
A track record of influencing engineering, product, and leadership teams that don't report to you, and turning findings into action
Preferred
Experience with generative AI misuse, such as account farming, API or reseller abuse, or automated content abuse.
Background at a consumer platform or a company built on user-generated content.
Experience partnering with engineers to design detection rules and abuse signals.
Familiarity with threat intelligence platforms or graph analysis tools.
Work Location Policy
This role is expected to work from the designated Suno office 5 days a week, per Suno's company policy. Full-time employees will receive competitive equity packages, and comprehensive benefits. The actual base salary offered may vary depending on location, skills, qualifications, and experience.
