Corporate Security Engineer - IAM, Endpoints & SaaS

Notion; New York (NY); Hybrid; USD 200,000 - 220,000; Full time

Job summary

Notion in New York City seeks a hands-on Corporate Security Engineer to own scalable security controls across identity, endpoints, SaaS, and workforce infrastructure. You will strengthen access management with Okta and Google Workspace, and partner with IT, GRC, and Detection & Response to protect our workforce and data.

You’ll write Python and Terraform, run an endpoint security program, and support audits (SOC 2, ISO 27001) while contributing to a security culture that balances velocity with

Qualifications

• 5+ years hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.
• Working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).
• Hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
• Proficiency in scripting and automation in Python or Bash; IaC with Terraform or equivalent.
• Familiarity with SaaS security risks (OAuth governance, SSPM) and integrating many vendors.
• Working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.

Responsibilities

• Own and evolve core security controls across identity, endpoints, SaaS, and workforce infrastructure.
• Write code (Python, Terraform) to automate access reviews, onboarding/offboarding, and audit collection.
• Partner with IT, GRC, and Detection & Response to improve security telemetry and foundations.
• Support SOC 2, ISO 27001, and customer audits as part of engineering workstreams.
• Govern AI tool usage and data protection for endpoint security and model governance.
• Lead SSPM and risk detection to identify risky OAuth grants, permissions, and shadow IT.
• Collaborate on incident response for phishing, account compromise, and lost devices.

Skills

Identity & access management

Endpoint security

Scripting (Python/Bash)

Infrastructure as Code (Terraform)

Cloud security

Written communication

Tools

Okta

Google Workspace

Terraform

AWS

Job description

Notion in New York City seeks a hands-on Corporate Security Engineer to own scalable security controls across identity, endpoints, SaaS, and workforce infrastructure. You will strengthen access management with Okta and Google Workspace, and partner with IT, GRC, and Detection & Response to protect our workforce and data.

You’ll write Python and Terraform, run an endpoint security program, and support audits (SOC 2, ISO 27001) while contributing to a security culture that balances velocity with