
Software Engineer, AI Product Security
About this role
Role Overview
The Software Engineer, AI Product Security position at Notion involves establishing the security foundations for collaborative artificial intelligence products in San Francisco, California. This role suits experienced engineering professionals who excel at designing secure software architectures and want to shape how teams safely build and interact with AI tools.
Key Responsibilities
Requirements
Nice to Have
Skills and Tools
Salary and Benefits
Notion provides highly competitive cash compensation, equity packages, and benefits. For this San Francisco-based position, the estimated base salary range falls between $270,000 and $340,000 per year, determined by factors such as location, scope, complexity, and candidate expertise.
About the Company
Notion operates as a collaborative AI workspace where teams and agents think together by housing knowledge, projects, meetings, and AI tools in one unified platform. Employees, known as Notinos, work together to set the standard for how humans collaborate in the artificial intelligence era, focusing on craft, long-lasting builds, and human-centric work.
How to Apply
Interested candidates should submit their application directly on the official Notion careers page.
Questions candidates ask
What is the location and work arrangement for this role?
This role is based in San Francisco, California. The team follows an onsite schedule with mandatory office attendance on Mondays, Tuesdays, and Thursdays, which are designated as Anchor Days.
What is the salary range for the Software Engineer, AI Product Security position?
The estimated base salary range for this role in San Francisco is $270,000 to $340,000 per year, accompanied by equity and benefits, depending on experience and role scope.
How many years of experience are required?
Candidates must bring 10+ years of professional experience designing, building, or securing complex software systems.
What kind of security testing will this engineer perform?
The engineer will build automated red-team and regression testing for risks including prompt injection, indirect instruction following, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace mutations.
Do I need deep AI expertise to apply to Notion?
Deep AI expertise is not required for every role, but Notion expects all employees to be intellectually curious and willing to use AI as a real collaborator in their work.