Security Engineer, Corporate Security

Stack

Responsibilities

• ▹Harden identity and access management (Okta, Google Workspace) with phishing-resistant MFA, strong SSO/SCIM lifecycles, and least-privilege access
• ▹Run the endpoint security program across a macOS-first fleet (MDM, EDR, configuration baselines), with working coverage for Windows and ChromeOS
• ▹Govern secure use of AI tools (LLMs, AI agents, MCP integrations) and detect unauthorized access or data exfiltration
• ▹Reduce SaaS risk at scale through SSPM tooling and custom automation (risky OAuth grants, shadow IT, configuration drift)
• ▹Write Python/Terraform automation for access reviews, onboarding/offboarding, and audit evidence collection
• ▹Partner with Detection & Response to ensure corporate systems produce the needed telemetry
• ▹Support SOC 2, ISO 27001, and customer audits
• ▹Participate in investigation and response for corporate security incidents (phishing, account compromise, lost devices, BEC)

Requirements

• ▹5+ years of hands-on experience in corporate/enterprise security or IT security engineering at a cloud-native company
• ▹Working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and underlying protocols (SAML, OIDC, OAuth 2.0, SCIM)
• ▹Hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments
• ▹Production-quality scripting and automation in Python or Bash, plus Terraform or other infrastructure-as-code experience
• ▹Familiarity with SaaS security risks (OAuth governance, audit logging, SSPM)
• ▹Working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level
• ▹Clear written communication and effective collaboration across IT, Engineering, Legal, People, and GRC

Nice to have

• ▹Experience at a fast-growing tech or AI company where the security program had to outpace headcount
• ▹Background in IT engineering, SRE, or production engineering that transitioned into security engineering
• ▹Experience building internal security tooling or workflows that improved employee or developer experience
• ▹Contributions to the security community through open-source tools, blog posts, or conference talks

Soft skills

What we offer

• ▹Highly competitive cash compensation, equity, and benefits
• ▹San Francisco or New York City office, with Anchor Days (Monday, Tuesday, Thursday) in-office

About the company

Notion is the collaborative AI workspace where teams and agents think together, bringing docs, projects, calendars, and email into one place with AI built in. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, rely on Notion.