SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 316,080 - 414,855 / annual
Suno is the fastest-growing consumer entertainment company and leader in AI music generation. This Sr. Staff Threat Intelligence Engineer role is a high-leverage position leading Suno's defense against adversaries targeting the platform, users, and business across security, trust & safety, and fraud domains.
You will investigate threat actors and campaigns targeting Suno—from account takeovers and payment fraud to coordinated platform abuse—and connect activity across all three areas. Using Python and SQL, you'll analyze large-scale event and account data to identify patterns, link related activity, and size emerging threats. Your technical depth will translate adversary tactics into concrete countermeasures, recommending detection, product, and architecture changes that engineering teams can implement.
You'll brief security, T&S, and fraud leaders with intelligence ranging from quick situational updates to deeper strategic assessments. As the threat intelligence function grows, you'll raise the bar by setting standards for collection, analysis, and tradecraft. Your work directly protects Suno's creative community, ensuring that making music stays safe, fun, and open to everyone.
This role requires influencing engineering, product, and leadership teams that don't report to you, turning findings into action across the organization. You'll work 5 days per week from Suno's Boston office.
REQUIREMENTS:
Must-Haves:
- 10+ years of experience in threat intelligence, with significant depth in at least two of: security, trust & safety, and fraud
- Strong threat intelligence fundamentals: tracking threat actors, attributing campaigns, OSINT, and linking related accounts and infrastructure
- Hands-on data skills: Python scripting and SQL against large datasets to drive your own investigations
- Technical fluency in modern web and cloud architecture; ability to understand how attacks work and how to break them without needing to ship production code
- Track record of influencing engineering, product, and leadership teams that don't report to you, and turning findings into action
Nice-to-Haves:
- Experience with generative AI misuse (account farming, API/reseller abuse, automated content abuse)
- Background at a consumer platform or company built on user-generated content
- Experience partnering with engineers to design detection rules and abuse signals
- Familiarity with threat intelligence platforms or graph analysis tools
