# Security Engineer, Corporate Security

**Company**: Notion
**Location**: Dublin
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/notion/866dc41d-3a50-4957-9a14-df27eae847e8?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9d8b8f98-ce8

## Description

Notion is looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe.

This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role.

Responsibilities:

- Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS.

- Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS.

- Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools.

- Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift.

- Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection.

- Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse.

- Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream.

- Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.

Requirements:

- Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.

- Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).

- Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.

- Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration.

- Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors.

- Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.

- Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC.

## Skills

### Required
- Okta
- Google Workspace
- Python
- Terraform
- macOS
- MDM
- EDR
- SaaS security
- OAuth governance
- cloud security
- identity provider
- endpoint management

### Nice to have
- AI security
- large language models
- model context protocol (MCP)
- SSPM tooling
- custom automation
- SOC 2
- ISO 27001

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/notion/866dc41d-3a50-4957-9a14-df27eae847e8?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)