Security Operations Engineer, Detection and Response Team

Security Operations Engineer, Detection and Response Team ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money. In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays. ABOUT THE ROLE: Millions of people use Notion — and this number is increasing every day. Our users depend on us to deliver a secure and trustworthy experience, and we value this more than anything. We want to keep building on that trust, while also continuing to amaze our users with the tools they can build in Notion. This is where you come in — to help us forge a strong, reliable path forward to the future. Notion is looking for a talented Security Engineer with solid communication and analytical skills to help us improve and optimize our security monitoring program. We are seeking someone with a mixture of technical ability, attention to detail, and who can function comfortably in a variety of cyber security disciplines. In addition to technical acumen and enthusiasm, we need a self-motivator to stay on top of emerging threats and vulnerabilities to Notion; providing a continuous proactive monitoring approach. If you're passionate about data privacy and Security, understand the security monitoring process, and enjoy designing creative approaches to provide effective security monitoring at scale. This could be just the opportunity you’ve been looking for. The Notion application is flexible, powerful and always evolving. With a product that needs to scale to meet the needs of many thousands of businesses globally. They rely on us to protect their data and that of their customers. Notion’s Security team builds and evolves our detection, response, and security automation capabilities to protect our users and data. We proactively monitor, detect, and investigate threats across Notion’s cloud-native environment, ensuring a resilient security posture. We partner closely with Engineering, Infrastructure, and Security leadership to continuously enhance our ability to respond to emerging threats at scale. WHAT YOU'LL ACHIEVE: You will design and implement advanced detections, automate security workflows, lead incident investigations, and conduct proactive threat hunts to identify and mitigate risks before they impact Notion. You will work in a highly collaborative team to evolve security defenses, reduce dwell time, and respond to sophisticated adversaries. - Lead detection engineering efforts, designing scalable, high-fidelity security detections across cloud, endpoint, and application environments. - Develop automation & orchestration solutions to improve response and containment times and enhance security workflows. - Own and drive incident response and command, leading major security incidents, containment, and remediation efforts. - Conduct proactive threat hunting, leveraging threat intelligence and hypothesis-driven methodologies to detect hidden adversary activity. - Reverse-engineer attacks, analyzing adversary behavior and developing robust detection strategies. - Continuously improve security defenses, applying lessons learned from incidents, hunting exercises, and emerging threat trends. SKILLS YOU'LL NEED TO BRING: 5+ years of experience in security detection, response, or related fields. DETECTION ENGINEERING & AUTOMATION - Strong ability to write, tune, and optimize detections across various platforms (e.g., EDR, SIEM, network monitoring) ... (truncated, view full listing at source)