Security Engineer, Detection and Response

Stack

Responsibilities

• ▹Design and maintain high-signal detections across cloud, identity, endpoint, and SaaS environments
• ▹Build and improve the detection platform: rule lifecycle management, tuning, measurement, rollout safety
• ▹Develop tooling and automation that accelerate triage, enrichment, investigation, and detection authoring, including LLM-based workflows
• ▹Translate threat intelligence and adversary TTPs into durable detections, telemetry requirements, and response improvements
• ▹Participate in investigations, incident response, and postmortems
• ▹Define and track key metrics such as coverage, MTTD, and alert quality
• ▹Participate in a shared on-call rotation

Requirements

• ▹6+ years of experience in detection engineering, security operations, incident response, or threat hunting
• ▹Built and operated production detections with strong signal quality and sustainable tuning processes
• ▹Fluent in one or more detection languages such as Sigma, KQL, SPL, YARA-L, EQL, or Panther
• ▹Offensive security mindset; led purple team, blue team, or adversary emulation exercises
• ▹Strong cloud security experience in AWS, GCP, or Azure, including identity-focused attack detection
• ▹Hands-on with SIEM, EDR, and SOAR platforms in large-scale environments
• ▹Communicate clearly through design docs, runbooks, and incident reports

Nice to have

• ▹Experience applying LLMs or agent-style tooling to security workflows
• ▹Experience securing AI-enabled systems or endpoint tooling
• ▹Kubernetes or container detection experience
• ▹Background in threat intelligence, malware analysis, or digital forensics
• ▹Contributions to the detection engineering community through research, tooling, or talks
• ▹Experience at a high-growth startup or AI company

Soft skills

What we offer

• ▹Highly competitive cash compensation, equity, and benefits
• ▹Estimated base salary: €127,000–€142,000 per year

About the company

Notion is the collaborative AI workspace where teams and agents think together, bringing knowledge, projects, meetings, and AI tools into one place. Millions of individuals, small teams, and large companies run their work on Notion.