Staff Detection & Response Engineer

• We’re looking for a Senior / Staff Detection & Response Engineer to design and own how we detect and respond to threats across our environment — the telemetry, the detections, the playbooks, and the on-call rotation
• This is a hands-on senior role for an engineer who wants to build detection and response the right way from the ground up and own it end to end
• Design and build our detection and telemetry pipeline, including logging coverage, the detection stack, and the data that feeds it
• Write high-signal detections mapped to the threats that matter most, starting with the paths that lead to a breach: identity, access, the cloud control plane, and data exfiltration
• Build and own incident response — playbooks, on-call, live response, and post-incident reviews that make us better each time
• Partner with security and platform engineering to close telemetry gaps and instrument what isn’t yet visible
• Set the bar for detection-as-code and a metrics-driven approach to response
• Build detection for AI-specific abuse and threats and novel attack patterns as they emerge
• Leverage AI to augment yourself so you can focus on the critical work that only you can do

Benefits

• Retirement Match: Suno offers a Traditional 401(k) plan and Roth 401(k) plan with a 3% Safe Harbor company match.
• Medical, Dental & Vision: We offer competitive medical, dental, vision insurance for employees and dependents.
• Commuter Benefit: Generous monthly stipend for commuting expenses.
• Lunch Program: Suno offers free lunch 5 days a week in each of our office locations.
• Time Off: Suno employees are provided with unlimited paid time off as well as unlimited sick days + 11 company holidays.
• Creative Education Stipend: Annual reimbursements for creative education and development.
• Parental Leave: 16 weeks of fully paid parental leave to both birthing and non-birthing parents.

Preferred experience

• Calm, structured, and decisive in a live incident
• Interest in detecting emerging AI/ML abuse and threat patterns
• 6+ years in detection and response, including building detection capability and setting direction — not only operating an established one
• Nice to have: Consumer product at scale, experience as an early or founding detection hire, exposure to AI/ML abuse or platform-abuse signals
• Strong AWS-native detection depth (CloudTrail, GuardDuty, VPC/flow logs, and the broader ecosystem)
• A detection-as-code, engineering-first mindset