This role is closed
Notion is no longer accepting applicants for this position. Browse other live web3 jobs or check out similar roles below.
◆ 6/10
techSecurity Engineerremote
About this role
Join Notion as a Security Engineer to enhance corporate security controls and protect our workforce. Work remotely while collaborating with teams to secure identity, endpoints, and SaaS applications.
Description
Notion is the collaborative AI workspace where teams and agents think together. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Responsibilities
What You'll Achieve:
- Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS.
- Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS.
- Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools.
- Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
- Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection.
- Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse.
- Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream.
- Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.
Requirements
Skills You Need to Bring:
- Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.
- Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).
- Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
- Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration.
- Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors.
- Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.
- Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC.
Conditions & Benefits
Nice to Haves:
- Experience at a fast-growing tech or AI company where the security program had to outpace headcount.
- A background in IT engineering, SRE, or production engineering that transitioned into security engineering.
- Experience building internal security tooling or workflows that improved employee or developer experience.
- Contributions to the security community through open-source tools, blog posts, or conference talks.
Job Details
Market range (est.)$90k–$180k
LocationRemote
AI Score★★★★★★☆☆☆☆ 6/10
PostedSep 14, 2026 (6d ago)
Tags & Skills
techSecurity Engineerremote
Tech Stack
PythonTerraformOktaGoogle WorkspacemacOSWindowsChromeOSAWSGCPAzure