Security Engineer Corporate Security
Notion is an AI workspace for capturing team knowledge, finding answers, and automating work with agents.
Funding history
About Notion
Notion Labs, Inc. operates a collaborative workspace that combines documents, knowledge management, databases, projects, search, and AI-enabled automation. Its developer platform provides an API for connecting workspaces to external tools and automating workflows.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own and improve technical controls across identity, endpoints, SaaS, and workforce infrastructure. You will harden identity and access management, operate endpoint security, secure AI tool usage, reduce SaaS risk, automate security workflows, support audits, and partner on detection, investigation, and response to corporate security incidents.
Requirements
- 5+ years of hands-on corporate, enterprise, or IT security engineering experience at a cloud-native company
- Working knowledge of an identity provider and SAML, OIDC, OAuth 2.0, and SCIM
- Hands-on endpoint-management and detection-tooling experience
- Ability to write production-quality Python or Bash automation
- Experience with Terraform or other infrastructure as code
- Knowledge of SaaS security risks, OAuth governance, audit logging, and SSPM
- Working knowledge of AWS, GCP, or Azure security configuration
- Written communication and cross-functional collaboration skills
Responsibilities
- Harden identity and access management controls across Okta, Google Workspace, and SaaS
- Operate endpoint security across macOS, Windows, and ChromeOS
- Secure AI tool usage and prevent risky AI-service access and data exfiltration
- Reduce SaaS risk through SSPM tooling and automation
- Write Python and Terraform automation for access reviews, lifecycle processes, drift detection, and audit evidence
- Ensure corporate systems produce telemetry for abuse detection
- Support SOC 2, ISO 27001, and customer audits
- Partner on investigation and response to corporate security incidents
