← All roles

Security Engineer, Corporate Security

Notion· Security
Apply on company site
Hybrid (San Francisco, California), Hybrid (New York, New York)$200k - $220kFull-timePosted 4mo ago

About the role

Hands-on Corporate Security Engineer role focused on building scalable controls and automation to protect Notion’s workforce, endpoints, SaaS usage, and corporate infrastructure. Collaborates with IT, Infrastructure, GRC, and Detection & Response to strengthen security foundations and enable secure productivity.

Responsibilities

  • Harden identity and access management stack (Okta, Google Workspace) with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS.
  • Run endpoint security program across a macOS-first fleet (MDM, EDR, configuration baselines) with coverage for Windows and ChromeOS.
  • Secure AI tool usage at the endpoint (governance of LLMs, AI agents, MCP integrations); detect/prevent unauthorized or risky AI service access and data exfiltration via AI-enabled tools.
  • Reduce SaaS risk at scale using SSPM tooling and automation; detect risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
  • Write production-quality code (Python, Terraform) to automate access reviews, onboarding/offboarding, configuration drift detection, and audit evidence collection.
  • Partner with Detection & Response to ensure telemetry supports detection of identity, endpoint, and SaaS abuse.
  • Support SOC 2, ISO 27001, and customer audits as a byproduct of engineering work.
  • Collaborate on investigation and response for corporate security incidents (phishing, account compromise, lost devices, BEC).

Qualifications

  • 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.
  • Working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and protocols (SAML, OIDC, OAuth 2.0, SCIM).
  • Hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
  • Production-quality scripting/automation in Python or Bash; experience shipping Terraform or other IaC for security configuration.
  • Familiarity with SaaS security risks (OAuth governance, audit logging, SSPM) and integrating a long tail of vendors.
  • Working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.
  • Strong written communication and ability to collaborate across IT, Engineering, Legal, People, and GRC.

Skills

Required:Identity and access managementEndpoint security and managementSaaS security and SSPMAutomation and scripting

Benefits

  • Not explicitly itemized in the description; Notion states competitive compensation, equity, and benefits.
  • The base salary range for SF/NYC: $200,000 - $220,000 per year.
Last updated Jul 15, 2026. Interested? Apply on the company site.
Notion logo

About Notion

The AI workspace that works for you.

Build custom agents, search across all your apps, and automate busywork. The AI workspace where teams get more done, faster.

AIsearchautomationteam collaborationknowledge baseproductivity
Company profileWebsite

More open roles at Notion