Detection Engineer

Location: Dublin, Ireland; hybrid

Salary: €75,000–€142,000 per year

Company

Notion provides a collaborative AI workspace for knowledge, projects, meetings, and AI tools.

What you will do

• Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments.
• Contribute to detection platform rule lifecycle management, measurement, and safe rollouts.
• Build automation for triage, enrichment, investigation, and detection authoring, including LLM-based workflows.
• Translate threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
• Participate in investigations, incident response, postmortems, and a shared on-call rotation.
• Define and track metrics such as coverage, MTTD, and alert quality.

Requirements

• 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a related security or software engineering role.
• Experience writing or tuning production detections and improving signal quality.
• Working knowledge of a detection or query language such as Sigma, KQL, SPL, YARA-L, EQL, or Panther, or strong SQL or Python skills.
• Understanding of attacker behavior and MITRE ATT&CK, plus hands-on experience with AWS, GCP, or Azure.
• Experience using SIEM, EDR, or SOAR tools and writing clear runbooks, design documents, and incident notes.
• Hybrid work in Dublin, Ireland is required.

Nice to have

• Experience with purple team, blue team, or adversary emulation exercises.
• Large-scale SIEM, EDR, or SOAR platform experience and detection-as-code workflows.
• Experience applying LLMs or agent-style tooling to security workflows or securing AI-enabled systems.
• Kubernetes or container detection, threat intelligence, malware analysis, or digital forensics experience.
• Security community contributions or experience at a high-growth startup or AI company.

Culture & Benefits

• Work on systems protecting trust for millions of Notion users.
• Collaborate with Engineering, Corporate Security, and Infrastructure teams with broad ownership.
• Competitive cash compensation, equity, and benefits.
• Emphasis on craft, durable systems, intellectual curiosity, and practical AI collaboration.