3 months ago
Base Salary
$290k - $350k/yr
Responsibilities
- Modernize and migrate authentication across product surfaces, including SAML/OIDC, OAuth flows, session semantics, passkeys, CSP, and redirect handling.
- Build and operate an AI safety guardrail stack with prompt-injection protections, vendor evaluations, deployment decisions, and agent integrations.
- Develop an external-source provenance system for AI-generated content across Mail, Calendar, and MCP.
- Set the direction for the authorization platform by evaluating architectural trade-offs such as SpiceDB versus Macaroons.
- Ship reusable security primitives that product teams can adopt without bespoke security work.
- Own a P0 security program end-to-end, including the RFC, rollout plan, partner alignment, execution, and measurable risk reduction.
- Ship AI-enabled security improvements such as an internal security agent for triage, verification, or continuous checks.
- Improve standards, adoption paths, and recurring vulnerability reduction across authentication, authorization, provenance, and domain posture.
Requirements
- 10+ years of experience in security engineering or a related field.
- Demonstrated experience shipping security-critical production infrastructure for identity, authentication, authorization, and platform primitives.
- Experience leading customer-impacting migrations with careful rollout plans and backward compatibility.
- Strong judgment in balancing security, product velocity, correctness, ergonomics, centralized platforms, and local autonomy.
- Track record of writing clear RFCs and aligning cross-functional stakeholders.
- Experience building or operating AI/LLM security protections such as prompt-injection defenses, tool or data provenance, and policy enforcement, or the ability to ramp quickly in the area.
- High agency and a systems mindset, including the ability to identify constraints, unblock partner teams, and build reusable primitives.
- Ability to mentor and multiply others through project ownership, enablement sessions, and practical security guidance.
Benefits
- In-person work is required on Mondays, Tuesdays, and Thursdays, with additional office days possible for certain teams or positions.
- Competitive cash compensation, equity, and benefits are offered.
- The role is based in the San Francisco office for the stated salary range.
Categories
About Notion
Notion blends your everyday work tools into one. Product roadmap? Company wiki? Meeting notes? With Notion, they're all in one place, and totally customizable to meet the needs of any workflow. It's the all-in-one workspace for you, your team, and your whole company. We humans are toolmakers by nature, but most of us can't build or modify the software we use every day — arguably our most powerful tool. Our team at Notion is on a mission to make it possible for everyone to shape the tools that shape their lives.