Security Engineer Corporate Security

Notion is an AI workspace for capturing team knowledge, finding answers, and automating work with agents.

San Francisco, United States
About Notion

Notion Labs, Inc. operates a collaborative workspace that combines documents, knowledge management, databases, projects, search, and AI-enabled automation. Its developer platform provides an API for connecting workspaces to external tools and automating workflows.

View jobs by Notion

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will own and improve technical controls across identity, endpoints, SaaS, and workforce infrastructure. You will harden identity and access management, operate endpoint security, secure AI tool usage, reduce SaaS risk, automate security workflows, support audits, and partner on detection, investigation, and response to corporate security incidents.

Requirements

  • 5+ years of hands-on corporate, enterprise, or IT security engineering experience at a cloud-native company
  • Working knowledge of an identity provider and SAML, OIDC, OAuth 2.0, and SCIM
  • Hands-on endpoint-management and detection-tooling experience
  • Ability to write production-quality Python or Bash automation
  • Experience with Terraform or other infrastructure as code
  • Knowledge of SaaS security risks, OAuth governance, audit logging, and SSPM
  • Working knowledge of AWS, GCP, or Azure security configuration
  • Written communication and cross-functional collaboration skills

Responsibilities

  • Harden identity and access management controls across Okta, Google Workspace, and SaaS
  • Operate endpoint security across macOS, Windows, and ChromeOS
  • Secure AI tool usage and prevent risky AI-service access and data exfiltration
  • Reduce SaaS risk through SSPM tooling and automation
  • Write Python and Terraform automation for access reviews, lifecycle processes, drift detection, and audit evidence
  • Ensure corporate systems produce telemetry for abuse detection
  • Support SOC 2, ISO 27001, and customer audits
  • Partner on investigation and response to corporate security incidents
Security Engineer Corporate Security at Notion | JobStash