Corporate Security Engineer (AI)

Location: Hybrid in San Francisco, California, or New York, New York. In-office collaboration is required on Mondays, Tuesdays, and Thursdays, with additional office days possible depending on the team or position.

Base salary: $200,000–$220,000 per year for roles based in San Francisco or New York City.

Company

Notion provides a collaborative AI workspace that combines documents, notes, projects, calendars, email, and AI tools for individuals and organizations.

What you will do

• Own and improve identity and access controls across Okta, Google Workspace, SSO, SCIM, and least-privilege SaaS access.
• Operate endpoint security across a macOS-first fleet using MDM, EDR, and configuration baselines, with coverage for Windows and ChromeOS.
• Govern AI tools, AI agents, and MCP integrations while detecting risky access and data exfiltration.
• Reduce SaaS risk through SSPM tooling and automation for OAuth grants, permissions, shadow IT, and configuration drift.
• Build Python and Terraform automation for access reviews, onboarding, offboarding, drift detection, and audit evidence collection.
• Support security telemetry, SOC 2 and ISO 27001 audits, and investigations into phishing, account compromise, lost devices, and BEC.

Requirements

• 5+ years of hands-on experience in corporate, enterprise, or IT security engineering at a cloud-native company.
• Working knowledge of Okta, Entra, or Google Workspace and SAML, OIDC, OAuth 2.0, and SCIM.
• Hands-on experience with endpoint management and detection tooling across macOS and enterprise environments.
• Production-quality Python or Bash scripting and experience shipping Terraform or other infrastructure-as-code for security configuration.
• Knowledge of SaaS security risks, OAuth governance, audit logging, SSPM, and at least one major cloud platform: AWS, GCP, or Azure.
• Ability to communicate clearly and collaborate across IT, Engineering, Legal, People, and GRC.

Nice to have

• Experience at a fast-growing technology or AI company.
• Background in IT engineering, SRE, or production engineering transitioning into security engineering.
• Experience building internal security tooling or workflows that improve employee or developer experience.
• Security community contributions through open-source tools, blog posts, or conference talks.

Culture & Benefits

• In-person collaboration is a core part of the working culture.
• Competitive cash compensation, equity, and benefits.
• Equal opportunity employment and reasonable accommodations during hiring.
• Security engineering is treated as product-quality infrastructure that should strengthen security while remaining easy to use.