Software Engineer, Product Security at Notion

This role is ideal for a mid-to-senior level security specialist who enjoys being a "builder" rather than just an auditor. You should have a strong background i

Work type: onsite

Location: San Francisco, California | New York, New York

Salary: $240,000 – $290,000/yr

Type: Full-time

Summary

This role is ideal for a mid-to-senior level security specialist who enjoys being a "builder" rather than just an auditor. You should have a strong background in cloud-based infrastructure (specifically AWS) and the ability to jump directly into the codebase to implement security features. Since this is described as a "founding member" position for this specific elite team, it’s perfect for someone who wants to shape the security culture and SDLC of a high-growth product. The compensation is highly competitive, starting at **$240,000 to $290,000**, reflecting the critical nature of the role. While listed as "Remote," the description clarifies a strict **hybrid schedule** requiring you to be in the San Francisco office on Mondays, Tuesdays, and Thursdays. This is a rare opportunity to act as a primary security expert for a platform used by millions, offering significant influence over architecture and cross-functional strategy. **You might be a good fit if you:** * Have experience with offensive thinking (pentesting/red teaming) but can also write production-ready code to fix vulnerabilities. * Are comfortable acting as a security liaison across product, engineering, and go-to-market teams. * Prefer a pragmatic, business-oriented approach over rigid technological ideology. * Want to lead the design of a secure development life cycle from the ground up.

Job Description

# About Us:

Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money.

In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays.

# About the Role:

Millions of people use Notion — and this number is increasing every day. Our users depend on us to deliver a secure and trustworthy experience, and we value this more than anything. In this role, we are looking for a founding member of an elite security engineering team that is responsible for all aspects of ensuring the security of our platform and users. You will be one of Notion’s foremost security expert, understanding the full attack surface of our product and working with a broad range of teams to secure it.

# What You'll Achieve:

• You'll help scale the engineering organization and mentor engineers on best practices in secure software design and architecture.

• You’ll enable the growth of Notion’s business by building a secure foundation that earns the trust of Notion’s users.

• You’ll design, implement, and (where possible) automate a software development life cycle that balances good vulnerability and risk detection coverage with developer velocity.

• You'll act as a liaison for multiple stakeholders across product, engineering, go to market, and security ops / compliance, to guide and prioritize the right security investments.

• You'll participate in security assessments and advise on on both internal and customer security and privacy needs (e.g. SOC2, ISO 27001, GDPR, penetration testing, enterprise asks)

• Security architecture and expertise: You have experience building systems to secure and monitor cloud architectures. You can contribute directly to our main codebase to raise the bar on security systems design and address vulnerabilities. You bring experience in a number of following areas:

• Threat modeling

• Securing a cloud-based infrastructure (e.g. AWS)

• Designing a secure development life cycle (design reviews, CI / CD integrations, bug bounty program)

• Application security consulting

• Secure library and framework development

• Vulnerability discovery and response

• Implement core security features like authentication to detecting and mitigating malicious activity

• Offensive thinking (e.g. pentesting, red teaming)

• Working in production: You have experience debugging systems in production. You appreciate the skill and challenge of continuously improving production components with minimal user disruption.

• Pragmatic and business-oriented: You care about business impact and prioritize projects accordingly — you model threat risks and balance the right security investments with the right bottom line outcomes.

• Not ideological about technology: To you, technologies and programming languages are about tradeoffs. You may be opinionated, but you're not ideological and can learn new technologies as you go.

• Empathetic communication: You communicate nuanced ideas clearly, whether you're explaining technical decisions in writing or brainstorming in real time. In disagreements, you engage thoughtfully with other perspectives and compromise when needed.

• Team player: For you, work isn't a solo endeavor. You enjoy collaborating cross-functionally to accomplish shared goals, and you care about learning, growing, and helping others to do the same.

• You don’t need to be an AI expert, but you’re curious and willing to adopt AI tools to work smarter and deliver better results.

• You've been responsible for maintaining continuous controls and participating in audits in relation to our customer facing certifications (like SOC2).

• You have experience leading engineering teams with a security focus.

• You've managed, maintained, and monitored systems using technologies like Amazon Web Services, Datadog, Postgres, Redis, Memcached, and Elasticsearch.

Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $240,000 - $290,000 per year.

By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s [Global Recruiting Privacy Policy](https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74) and [NYLL 144](https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528).

#LI-Onsite

View this job on nocollar jobs