Security Engineer, Detection and Response, San Francisco
Notion · Security
- Location
- San Francisco, California, United States · New York, New York, United States · Remote
- Metro
- San Francisco Bay Area, New York City
- Workplace
- Hybrid
- Level
- Senior
- Type
- Full-time
- Pay
- $230K–$260K/yr (estimated from posting text)
- Posted
- 4 months ago
- Source
- Ashby
Read the full posting & apply ↗
What the posting covers
Who We Are
Notion is the collaborative AI workspace where teams and agents think together. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small…
About The Role
Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to…
What You'll Achieve
Design and maintain high-signal detections across cloud, identity, endpoints, and SaaS environments. Build and improve the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. Develop tooling and automation that…
Skills You'll Need to Bring
Have 6+ years of experience in detection engineering, security operations, incident response, or threat hunting. Have built and operated production detections with strong signal quality and sustainable tuning processes. Are fluent in one or more detection…
Nice to Have
Experience applying LLMs or agent-style tooling to security workflows. Experience securing AI-enabled systems or endpoint tooling. Kubernetes or container detection experience. Background in threat intelligence, malware analysis, or digital forensics.…
A Note on AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when…
Excerpts only. The employer’s page has the complete posting.