# Security Engineer, Detection and Response

Hiring organization: [Notion](https://career.thegoodapps.co/organizations/notion)

Canonical page: https://career.thegoodapps.co/jobs/1d6d9b2f-5ec0-4d94-8527-ed7a4363a093

Listed on Notion's own careers site. Applications go to them directly.

- Employment type: full time
- Seniority: Mid
- Location: San Francisco, CA
- Remote: yes
- Salary: 185000 – 280000 USD per year

## Summary

Notion seeks a detection engineer to build production detection systems and respond to security incidents across their cloud infrastructure. This role combines software engineering rigor with security operations, suited for someone who enjoys writing detections as code and improving how threats are caught at scale.

_Our summary, not Notion's wording._

## Skills named

Amazon Web Services (AWS), Kubernetes, Kusto Query Language (KQL), Microsoft Azure, Python, SQL

## Required

- 3+ years in detection engineering, security operations, incident response, threat hunting, or related security/software engineering role
- Written or tuned detections in production with focus on signal quality
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, Panther) or strong SQL/Python skills
- Understanding of attacker tactics and MITRE ATT&CK framework
- Hands-on experience with AWS, GCP, or Azure including identity and access logs
- Experience with SIEM, EDR, or SOAR tools
- Clear writing in runbooks, design docs, and incident notes; ability to own scoped projects end to end

## Nice to have

- Led purple team, blue team, or adversary emulation exercises
- Operated SIEM, EDR, or SOAR platforms at large scale
- Built or maintained detection-as-code workflows with version control and CI/CD
- Applied LLMs or agent-style tooling to security workflows
- Experience securing AI-enabled systems or endpoint tooling
- Kubernetes or container detection experience
- Background in threat intelligence, malware analysis, or digital forensics
- Security community contributions through research, tooling, CTFs, or talks
- Experience at high-growth startup or AI company

Apply on Notion's site: https://jobs.ashbyhq.com/notion/06e1d3a8-2706-4ed9-9fe6-8b69607de18e/application