5 months ago
Base Salary
$290k - $350k/yr
Responsibilities
- Modernize and migrate authentication across product surfaces, including SAML/OIDC, OAuth flows, session semantics, passkeys, CSP, and redirect handling.
- Build and operate an AI safety guardrail stack with prompt-injection protections, vendor evaluations, deployment decisions, and agent integrations.
- Develop an external-source provenance system for AI-generated content across Mail, Calendar, and MCP.
- Set the direction for the authorization platform by evaluating architectural trade-offs such as SpiceDB versus Macaroons.
- Ship reusable security primitives that product teams can adopt without bespoke security work.
- Own a P0 security program end-to-end, including the RFC, rollout plan, partner alignment, execution, and measurable risk reduction.
- Ship AI-enabled security improvements such as an internal security agent for triage, verification, or continuous checks.
- Improve standards, adoption paths, and recurring vulnerability reduction across authentication, authorization, provenance, and domain posture.
Requirements
- 10+ years of experience in security engineering or a related field.
- Demonstrated experience shipping security-critical production infrastructure for identity, authentication, authorization, and platform primitives.
- Experience leading customer-impacting migrations with careful rollout plans and backward compatibility.
- Strong judgment in balancing security, product velocity, correctness, ergonomics, centralized platforms, and local autonomy.
- Track record of writing clear RFCs and aligning cross-functional stakeholders.
- Experience building or operating AI/LLM security protections such as prompt-injection defenses, tool or data provenance, and policy enforcement, or the ability to ramp quickly in the area.
- High agency and a systems mindset, including the ability to identify constraints, unblock partner teams, and build reusable primitives.
- Ability to mentor and multiply others through project ownership, enablement sessions, and practical security guidance.
Benefits
- In-person work is required on Mondays, Tuesdays, and Thursdays, with additional office days possible for certain teams or positions.
- Competitive cash compensation, equity, and benefits are offered.
- The role is based in the San Francisco office for the stated salary range.
Categories
About Notion
Notion builds an all-in-one workspace that combines docs, wikis, databases, and project management with collaborative AI features for individuals and teams. It operates a freemium, subscription-based, land‑and‑expand model used from small groups to large enterprises. Founded in 2016 and headquartered in San Francisco, the privately held company focuses on unifying knowledge, projects, and workflows in a customizable platform.