Senior AI Product Security Engineer: Build Trust

Notion; San Francisco (CA); On-site; USD 270,000 - 340,000; Full time

Job summary

Notion is seeking an experienced security engineering leader in San Francisco to design and build secure software systems for our AI products. You will partner with product and engineering teams on agent runtimes, tool permissions, retrieval, content writes, observability, and abuse-resistant design.

You’ll translate risk into concrete architectural guardrails, automated tests, and production systems that enable safe feature releases.

Qualifications

• 8–10+ years of experience designing, building, or securing complex software systems.
• Ability to reason about permissions, data flow, and trust boundaries in large systems.
• Experience translating security risks into product design or architecture.

Responsibilities

• Define and build security architecture for product surfaces across workspace content, including tool execution, content writes, retrieval, permissions, provenance, and auditability.
• Ship reusable libraries, review patterns, test fixtures, and guardrails to make secure paths the easy path for product teams.
• Build automated red-team and regression tests for risks like prompt injection, data exfiltration, cross-tenant leakage, and unsafe workspace mutations.
• Translate threat models into engineering requirements, production checks, and launch criteria.
• Use production signals and incident learnings to harden Notion and feed insights back into architecture and developer workflows.
• Define the security bar for engineers using coding agents, MCP-enabled tools, hooks, and internal automation.

Skills

Secure software engineering

Security architecture

Security product strategy

Builder mindset

Job description

Notion is seeking an experienced security engineering leader in San Francisco to design and build secure software systems for our AI products. You will partner with product and engineering teams on agent runtimes, tool permissions, retrieval, content writes, observability, and abuse-resistant design.

You’ll translate risk into concrete architectural guardrails, automated tests, and production systems that enable safe feature releases.