Corporate Security Engineer — IAM, Endpoints & Automation

Apply; Dublin; On-site; EUR 120,000 - 170,000; Full time

Job summary

Notion is seeking a hands-on Corporate Security Engineer to own and improve the controls that keep our workforce and environment safe. You’ll build scalable security systems across identity, endpoints, SaaS, and workforce infrastructure, partnering with IT, Infra, GRC, and Detection & Response.

You’ll write Python and Terraform, automate access reviews and offboarding, and contribute to SOC 2 and ISO 27001 audits.

Qualifications

• 5+ years in corporate security or IT security engineering.
• Experience with identity providers (Okta, Entra, Google Workspace) and protocols (SAML, OIDC, OAuth 2.0, SCIM).
• Experience operating endpoint management across macOS and enterprise environments.
• Ability to write production scripts in Python or Bash; IaC (Terraform).
• Familiarity with SaaS security risks and vendor integrations.
• Knowledge of AWS, GCP, or Azure at security configuration level.
• Strong written communication across IT, Engineering, Legal, GRC.

Responsibilities

• Harden identity and access management with MFA, SSO, SCIM, least privilege.
• Run endpoint security program across a macOS fleet.
• Secure AI tool usage at endpoints and governance of AI agents.
• Reduce SaaS risk with SSPM tooling and detection of risky OAuth grants.
• Write code to automate access reviews and offboarding.
• Collaborate with Detection & Response to get telemetry for identity, endpoint, and SaaS abuse.
• Support SOC 2, ISO 27001 audits.
• Investigate security incidents with Detection & Response.

Skills

IAM & SSO

Endpoint security

Python

Terraform

SaaS security

Cloud security

Written communication

Tools

Okta

Google Workspace

MDM

EDR

AWS

GCP

Azure

Job description

Notion is seeking a hands-on Corporate Security Engineer to own and improve the controls that keep our workforce and environment safe. You’ll build scalable security systems across identity, endpoints, SaaS, and workforce infrastructure, partnering with IT, Infra, GRC, and Detection & Response.

You’ll write Python and Terraform, automate access reviews and offboarding, and contribute to SOC 2 and ISO 27001 audits.