Security Engineer, Detection and Response

requirements, and response improvements. Participate in investigations, incident response, and postmortems that drive long-term security improvements. Define and track key metrics such as coverage, MTTD, and alert quality to guide investment decisions. Participate in a shared on-call rotation for incident response. Skills You'll Need to Bring Have 6+ years of experience in detection engineering, security operations, incident response, or threat hunting. Have built and operated production detections with strong signal quality and sustainable tuning processes. Are fluent in one or more detection languages such as Sigma, KQL, SPL, YARA-L, EQL, or Panther. Have an offensive security mindset and have led purple team, blue team, or adversary emulation exercises that improved detections and telemetry. Have strong cloud security experience in AWS, GCP, or Azure, including identity-focused attack detection. Are hands-on with SIEM, EDR, and SOAR platforms in large-scale environments. Communicate clearly through design docs, runbooks, and incident reports, and can drive projects independently.

Nice to Have Experience applying LLMs or agent-style tooling to security workflows. Experience securing AI-enabled systems or endpoint tooling. Kubernetes or container detection experience. Background in threat intelligence, malware analysis, or digital forensics. Contributions to the detection engineering community through research, tooling, or talks. Experience at a high-growth startup or AI company Notion is committed to providing highly competitive cash

compensation, equity, and

benefits. The

compensation offered for this role will be based on multiple factors such as location,

the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $230,000 - $260,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy and NYLL 144 . #LI-Onsite A Note on AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the

qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. Equal Opportunity & Accommodations We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.