Security Engineer (Corporate Security)

Join Notion, a fast-growing tech company, as a Corporate Security Engineer. In this hands-on role, you will be responsible for improving the technical controls that keep our workforce and corporate environment safe. You will work closely with IT, Infrastructure, GRC, and Detection & Response to enhance the security foundations that employees rely on every day. Your tasks will include hardening our identity and access management stack, running our endpoint security program, securing AI tool usage, reducing SaaS risk, and supporting audits.

• Ownership and improvement of technical controls to ensure the safety of the workforce and corporate environment.
• Designing systems and automation that scale with the company, and helping to make security both stronger and easier to use.
• Partnering closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day.
• Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level
• Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM)
• Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments
• Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company
• Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration
• Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors
• Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC
• A background in IT engineering, SRE, or production engineering that transitioned into security engineering
• Experience at a fast-growing tech or AI company where the security program had to outpace headcount
• Contributions to the security community through open-source tools, blog posts, or conference talks
• Experience building internal security tooling or workflows that improved employee or developer experience
• If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply