3 months ago
Base Salary
$220k - $260k/yr
Responsibilities
- Harden the Okta and Google Workspace identity and access management stack with phishing-resistant MFA, SSO, SCIM, and least-privilege controls.
- Run endpoint security for a macOS-first fleet using MDM, EDR, and configuration baselines, with coverage for Windows and ChromeOS.
- Govern AI tool, AI agent, and MCP usage at endpoints while detecting risky access and data exfiltration.
- Reduce SaaS risk through SSPM tooling and automation that detects risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
- Build Python and Terraform automation for access reviews, employee lifecycle workflows, configuration drift detection, and audit evidence collection.
- Partner with Detection & Response to generate security telemetry and investigate and respond to phishing, account compromise, lost-device, and BEC incidents.
- Support SOC 2, ISO 27001, and customer audits through strong security engineering practices.
Requirements
- Hands-on experience building and operating corporate security controls across identity, endpoints, SaaS, and workforce infrastructure is expected.
- Experience with identity and access management, phishing-resistant MFA, SSO, SCIM lifecycles, and least-privilege access is relevant to the role.
- Experience with endpoint security, including MDM, EDR, and configuration baselines across macOS, Windows, and ChromeOS, is relevant to the role.
- Experience writing Python and Terraform automation for access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection is relevant to the role.
- Experience securing AI tools, AI agents, large language model usage, or MCP integrations is relevant to the role.
- Nice-to-have experience includes working at a fast-growing technology or AI company, a background in IT engineering, SRE, or production engineering, building internal security tooling, or contributing to the security community.
- The posting encourages candidates to apply even if their background does not align perfectly with every listed qualification.
Benefits
- In-person work is required on Mondays, Tuesdays, and Thursdays, with additional office days possible for certain teams or positions.
- The role offers competitive cash compensation, equity, and benefits.
- The estimated base salary range for San Francisco or New York City is $220,000-$260,000 per year.
About Notion
Notion blends your everyday work tools into one. Product roadmap? Company wiki? Meeting notes? With Notion, they're all in one place, and totally customizable to meet the needs of any workflow. It's the all-in-one workspace for you, your team, and your whole company. We humans are toolmakers by nature, but most of us can't build or modify the software we use every day — arguably our most powerful tool. Our team at Notion is on a mission to make it possible for everyone to shape the tools that shape their lives.