Software Engineer, AI Product Security

Notion is seeking an experienced engineer to define and build the security foundations for its AI products. The role partners with product and engineering teams to turn product risks into secure architecture, reusable guardrails, automated testing, and production systems.

Responsibilities

• Define and build security architecture for product surfaces that operate across customer workspace content, including tool execution, content writes, retrieval, permission checks, provenance, and auditability
• Make the secure path the easy path for product teams by shipping reusable libraries, review patterns, test fixtures, and guardrails that prevent classes of vulnerabilities
• Build automated red-team and regression testing for risks such as prompt injection, indirect instruction following, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace mutations
• Translate threat models for new product surfaces into concrete engineering requirements, production checks, and launch criteria
• Use production signals, incident learnings, and targeted experiments to harden Notion over time, then feed those learnings back into architecture and developer workflows
• Help define the security bar for how engineers use coding agents, MCP-enabled tools, hooks, and internal automation without introducing new risk

Preferred

• Experience building or securing products with tool use, retrieval, workflow automation, content writes, or complex permission boundaries
• Hands-on experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design
• Experience with enterprise SaaS security models: permissions, sharing, audit logs, data residency, encryption, compliance, or customer-facing trust guarantees
• Experience building developer tooling, CI checks, coding-agent workflows, MCP integrations, or internal frameworks that shape how engineers build software
• Public security research, vulnerability writeups, conference talks, or open-source work related to product security or secure developer infrastructure
• Product Security
• Secure Product Development
• Tool-Use Security
• Retrieval Security
• Workflow Automation
• Content-Writing Security
• Permission-Boundary Security
• Prompt-Injection Testing
• Red Teaming
• Model Behavior Evaluation
• Abuse-Resistant Application Design
• Enterprise SaaS Security
• Permissions Management
• Sharing Controls
• Audit Logging
• Data Residency
• Encryption
• Compliance
• Customer Trust Guarantees
• Developer Tooling
• CI Checks
• Coding-Agent Workflows
• MCP Integrations
• Internal Framework Development
• Secure Software Development
• Security Research
• Vulnerability Writeups
• Open-Source Security Work
• Secure Developer Infrastructure

Benefits

• Equity
• Hybrid work arrangement: office work on Mondays, Tuesdays and Thursdays (Anchor Days).

Company

• AI workspace for customizable team collaboration and workflow automation
• San Francisco, California, USA
• https://www.notion.com/
• Founded in 2016
• 501-1000 employees

Qualifications

• You have 8-10+ years of experience designing, building, or securing complex software systems, and you are comfortable working in production code with product and platform engineers
• You can look at a complex system and reason about where the permissions, data flow, or trust boundaries are likely to get weird, and help re-design it to make them better
• You can turn a complex security risk you see into a product design or architecture that can be built
• You'd rather leave behind a useful tool, test, library, or pattern than a task or project for someone else to pick up later
• Experience building or securing products with tool use, retrieval, workflow automation, content writes, or complex permission boundaries
• Hands-on experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design
• Experience with enterprise SaaS security models: permissions, sharing, audit logs, data residency, encryption, compliance, or customer-facing trust guarantees
• Experience building developer tooling, CI checks, coding-agent workflows, MCP integrations, or internal frameworks that shape how engineers build software
• Public security research, vulnerability writeups, conference talks, or open-source work related to product security or secure developer infrastructure
• You have 8-10+ years of experience designing, building, or securing complex software systems, and you are comfortable working in production code with product and platform engineers.

Required skills

• Abuse-Resistant Application Design, Access Control, CI Checks, Developer Tooling, Enterprise SaaS Security, Model Behavior Evaluation, Product Security, Prompt Injection Testing, Red Teaming, Secure Software Engineering, Security Architecture, Threat Modeling

Experience

• 8+ years