← All roles

Security Engineer, Corporate Security

Notion· Security
Apply on company site
Hybrid (Dublin, Ireland)Full-timePosted 1mo ago

About the role

Hands-on Corporate Security Engineer focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure to protect Notion's workforce and corporate environment.

Responsibilities

  • Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS.
  • Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS.
  • Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risks AI service access and data exfiltration through AI-enabled tools.
  • Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
  • Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration.
  • Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse.
  • Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream.
  • Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.

Qualifications

  • 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.
  • Working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).
  • Hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
  • Produce code/scripts in Python or Bash; have shipped Terraform or other infrastructure-as-code for security configuration.
  • Familiarity with SaaS security risks (OAuth governance, audit logging, SSPM) and integrating a long tail of vendors.
  • Working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.
  • Clear written communication and ability to work across IT, Engineering, Legal, People, and GRC.

Skills

Required:Identity and access managementEndpoint securityAI governance at endpointSSPM and OAuth governanceAutomation and scriptingTelemetry and detection collaborationIncident response collaboration
Nice to have:Audits and compliance support
Last updated Oct 21, 2026. Interested? Apply on the company site.
Notion logo

About Notion

The AI workspace that works for you.

Build custom agents, search across all your apps, and automate busywork. The AI workspace where teams get more done, faster.

AIsearchautomationteam collaborationknowledge baseproductivity
Company profileWebsite

More open roles at Notion