Latest AI JobsBrowse Jobs
Notion logo

Security Engineer, Corporate Security

NotionSan Francisco, CaliforniaSecurity
Apply on company site
Salary
$200K - $220K USD
Job type
Full-time
Work mode
Remote
Posted
8 Jun 2026
Status
Open · checked 7d ago

About this role

Notion is seeking a hands-on Security Engineer, Corporate Security to join the team in San Francisco, California, offering a hybrid work arrangement with required office days. This engineering role is ideal for a candidate with a strong background in enterprise security who wants to build scalable technical controls and automation for workforce infrastructure.

Role Overview

Protecting the millions of users who rely on Notion starts with safeguarding the employees who build the platform. The Corporate Security Engineer will own and improve the technical controls that keep the workforce and corporate environment safe. This position focuses heavily on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, rather than traditional IT support. The engineer will design systems that scale, make security easier to use, and partner with IT, Infrastructure, GRC, and Detection and Response teams.

Key Responsibilities

Harden the identity and access management stack, including Okta and Google Workspace, utilizing phishing-resistant MFA, strong SSO, SCIM lifecycles, and least-privilege access across SaaS.
Operate the endpoint security program across a macOS-first fleet, encompassing MDM, EDR, and configuration baselines, while maintaining coverage for Windows and ChromeOS.
Secure AI tool usage at the endpoint by governing large language models, AI agents, and model context protocol (MCP) integrations, while detecting and preventing unauthorized AI service access.
Reduce SaaS risk at scale using SSPM tooling and custom automation to detect risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
Write code in Python and Terraform to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection.
Partner with Detection and Response to ensure corporate systems generate the telemetry necessary to identify identity, endpoint, and SaaS abuse.
Support compliance frameworks including SOC 2, ISO 27001, and customer audits as a byproduct of robust engineering practices.
Collaborate on corporate security incident investigations covering phishing, account compromise, lost devices, and business email compromise.

Requirements

Bring at least 5 years of hands-on experience in corporate, enterprise, or IT security engineering at a cloud-native company.
Possess working knowledge of a major identity provider such as Okta, Entra, or Google Workspace alongside underlying protocols like SAML, OIDC, OAuth 2.0, and SCIM.
Demonstrate hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configurations.
Understand SaaS security risks, including OAuth governance, audit logging, and SSPM, alongside the realities of managing vendor integrations.
Maintain working knowledge of at least one major cloud platform, including AWS, GCP, or Azure, at the security configuration level.
Communicate clearly in writing and collaborate effectively across IT, Engineering, Legal, People, and GRC teams.

Nice to Have

Experience working at a fast-growing tech or AI company where the security program scaled faster than headcount.
A professional background in IT engineering, SRE, or production engineering prior to transitioning into security engineering.
Experience building internal security tooling or workflows that directly enhanced employee or developer experiences.
Contributions to the broader security community through open-source tools, blog posts, or conference presentations.

Skills and Tools

Python
AWS
GCP
Azure
Terraform
Figma
Okta
Google Workspace
macOS, Windows, and ChromeOS endpoint tools
SSPM tooling

Salary and Benefits

Estimated base salary for this role in San Francisco ranges from $200,000 to $220,000 per year. Actual compensation is determined by multiple factors including location, role scope and complexity, and candidate experience. Notion provides highly competitive cash compensation, equity, and benefits.

About the Company

Notion is the collaborative AI workspace where teams and agents think together, combining knowledge, projects, meetings, and AI tools into one unified platform. Millions of individuals, small teams, and large organizations such as Toyota, Figma, and OpenAI rely on Notion for their daily work. The company values craft, long-lasting solutions, and in-person collaboration, designating Mondays, Tuesdays, and Thursdays as mandatory anchor days in the office.

How to Apply

To apply for this position, please visit the official company careers page and submit your application online.

Skills and tech stack

PythonAWSGCPAzureTerraformFigma

Questions candidates ask

What is the primary focus of this Corporate Security Engineer role?

The role focuses on building scalable technical controls and automation across identity, endpoints, SaaS, and workforce infrastructure, rather than handling traditional IT support.

Where is this position located?

The position is based in San Francisco, California, with a hybrid work model that requires team members to work from the office on Mondays, Tuesdays, and Thursdays.

What is the expected salary range for candidates in San Francisco?

The estimated base salary range for this role in San Francisco is $200,000 to $220,000 per year, depending on experience, expertise, and scope.

How many years of experience are required?

Candidates must bring 5 or more years of hands-on experience in corporate, enterprise, or IT security engineering at a cloud-native company.

What specific technical skills and tools are mentioned in the requirements?

Required technical competencies include Python or Bash scripting, Terraform or infrastructure-as-code, identity providers like Okta or Google Workspace, and endpoint management tools.

Ready to apply?

The application is on the official Notion careers page.

Apply on company site