Senior Corporate Security Engineer - IAM & AI Endpoint Security

Intermedia Lab; San Francisco (CA); On-site; USD 200,000 - 220,000; Full time

Job summary

Notion is seeking a hands-on Corporate Security Engineer to own scalable security controls across identity, endpoints, SaaS, and workforce infrastructure. This role emphasizes security engineering over traditional IT support and collaborates with IT, Infrastructure, GRC, and Detection & Response.

You will strengthen identity protection, manage macOS-first endpoint security, govern AI tool usage, and drive automation with Python and Terraform while aligning with security compliance and audits.

Qualifications

• Have 5+ years of hands-on experience in corporate security at a cloud-native company.
• Working knowledge of identity providers (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).
• Hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
• Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration.
• Familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors.
• Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.
• Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC.

Responsibilities

• Harden identity and access management stack with phishing-resistant MFA, SSO, SCIM lifecycles, and least-privilege across SaaS.
• Run endpoint security program across a macOS-first fleet with MDM, EDR, and baselines; provide coverage for Windows and ChromeOS.
• Secure AI tool usage at the endpoint with governance of LLMs, AI agents, and MCP integrations; detect risky access and data exfiltration.
• Reduce SaaS risk at scale through SSPM tooling and automation; detect risky OAuth grants and shadow IT.
• Write code to automate access reviews, onboarding/offboarding, drift detection, and audit evidence collection.
• Partner with Detection & Response to ensure telemetry for identity, endpoint, and SaaS abuse.
• Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering.
• Collaborate on investigation and response for security incidents (phishing, account compromise, lost devices, BEC).

Skills

Security experience

Identity providers

Endpoint management

Python scripting

Cloud security

SaaS security

Communication

Tools

Okta

Entra

Google Workspace

Terraform

MDM

EDR

Job description

Notion is seeking a hands-on Corporate Security Engineer to own scalable security controls across identity, endpoints, SaaS, and workforce infrastructure. This role emphasizes security engineering over traditional IT support and collaborates with IT, Infrastructure, GRC, and Detection & Response.

You will strengthen identity protection, manage macOS-first endpoint security, govern AI tool usage, and drive automation with Python and Terraform while aligning with security compliance and audits.