Skip to main content
CareerApp

Security Engineer, Corporate Security

Notion

San Francisco, CA · Remote · full time · Mid

$200,000 – $220,000

Listed on Notion’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role focuses on building and scaling security infrastructure for Notion's corporate environment, covering identity management, endpoint protection, SaaS governance, and AI tool security. It suits security engineers who enjoy hands-on infrastructure work and want to design systems that grow with a fast-moving company.

Our summary, not Notion’s wording. The full posting is on their site.

What they ask for

Required

  • 5+ years of corporate, enterprise, or IT security engineering experience at a cloud-native company
  • Hands-on knowledge of an identity provider (Okta, Entra, or Google Workspace) and SAML, OIDC, OAuth 2.0, SCIM protocols
  • Hands-on experience with endpoint management and detection tools on macOS and enterprise environments
  • Write production-quality Python or Bash scripts and ship Terraform or infrastructure-as-code for security
  • Understand SaaS security risks including OAuth governance, audit logging, and SSPM
  • Working knowledge of AWS, GCP, or Azure at the security configuration level
  • Clear written communication and cross-functional collaboration

Nice to have

  • Experience at a fast-growing tech or AI company where security scaled with headcount
  • Background in IT engineering, SRE, or production engineering transitioning to security
  • Built internal security tooling or workflows improving employee or developer experience
  • Contributions to security community through open-source tools, blog posts, or conference talks

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.