Security Engineer (Corporate Security)

Join Notion, a fast-growing tech company, as a Corporate Security Engineer. In this hands-on role, you will own and improve the technical controls that keep our workforce and corporate environment safe. You will work closely with IT, Infrastructure, GRC, and Detection & Response to enhance the security foundations that employees rely on every day. Your responsibilities will include hardening our identity and access management stack, running our endpoint security program, securing AI tool usage, reducing SaaS risk, and writing code to automate various security processes. You should have 5+ years of experience in corporate security, enterprise security, or IT security engineering, and be familiar with SaaS security risks and cloud platforms.

• Posséder et améliorer les contrôles techniques qui garantissent la sécurité de l'environnement de travail et de l'infrastructure des employés.
• Renforcer notre programme de sécurité des points de terminaison, y compris la gestion des appareils mobiles, la détection et la réponse aux incidents.
• Écrire du code (Python, Terraform) pour automatiser les examens d'accès, l'intégration et la désintégration, la détection des dérives de configuration.

• Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM)
• Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC
• Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company
• Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors
• Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration
• Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level
• Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments
• If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you
• You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications
• People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on
• Experience at a fast-growing tech or AI company where the security program had to outpace headcount
• Contributions to the security community through open-source tools, blog posts, or conference talks
• A background in IT engineering, SRE, or production engineering that transitioned into security engineering
• Experience building internal security tooling or workflows that improved employee or developer experience