Security Engineer (AI)

Location: Hybrid in San Francisco, California, with office attendance required on Mondays, Tuesdays, and Thursdays. The role is based in San Francisco.

Base salary for roles based in San Francisco: $270,000–$340,000 per year, plus equity and benefits.

Company

Notion builds a collaborative AI workspace where knowledge, projects, meetings, and AI tools are combined in one product.

What you will do

• Define and build security architecture for AI product surfaces involving customer workspace content, tool execution, content writes, retrieval, permissions, provenance, and auditability.
• Develop reusable security libraries, review patterns, test fixtures, and guardrails that help product teams avoid vulnerability classes.
• Build automated red-team and regression testing for prompt injection, indirect instruction following, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace mutations.
• Translate threat models into engineering requirements, production checks, and launch criteria.
• Use production signals, incident learnings, and targeted experiments to strengthen architecture and developer workflows.
• Help establish secure engineering practices for coding agents, MCP-enabled tools, hooks, and internal automation.

Requirements

• 8–10+ years of experience designing, building, or securing complex software systems.
• Ability to reason about permissions, data flows, trust boundaries, and security architecture in complex systems.
• Experience building or securing products with tool use, retrieval, workflow automation, content writes, or complex permission boundaries.
• Hands-on experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design.
• Experience with enterprise SaaS security models, including permissions, sharing, audit logs, data residency, encryption, compliance, or customer-facing trust guarantees.
• Experience building developer tooling, CI checks, coding-agent workflows, MCP integrations, or internal engineering frameworks.

Nice to have

• Public security research, vulnerability writeups, conference talks, or open-source work related to product security or secure developer infrastructure.

Culture & Benefits

• Hybrid collaboration with dedicated in-office Anchor Days on Mondays, Tuesdays, and Thursdays.
• Competitive cash compensation, equity, and benefits.
• Emphasis on craftsmanship, durable systems, intellectual curiosity, and practical use of AI as a work collaborator.
• Equal opportunity employment and reasonable accommodations during the application process.