Security Engineer, Corporate Security

Corporate Security Engineer on Notion's security team, owning the technical controls that protect employees, their devices and identities, and the SaaS tools they use. The engineer hardens Okta and Google Workspace with phishing-resistant MFA, SSO, SCIM and least privilege, runs endpoint security across a mostly macOS fleet, governs AI tools, agents and MCP integrations on endpoints, cuts SaaS risk with SSPM and custom automation, writes Python and Terraform for access reviews and audit evidence, and works with Detection & Response on telemetry and incidents.

Notion wants five or more years in corporate or IT security engineering at a cloud-native company, identity protocol knowledge, macOS endpoint tooling, scripting and infrastructure-as-code. The role is hybrid, in the San Francisco or New York office on Mondays, Tuesdays and Thursdays.