Software Engineer, AI Product Security
$270k - $340k • San Francisco, California • FullTime
Posted 4mo ago
Job Location
San Francisco, California
Tech Stack
Remote Work Policy
On-site
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
Notion is seeking an experienced engineer to establish the security foundations for its AI products. This role involves collaborating with product and engineering teams to address security aspects of agent runtimes, tool permissions, retrieval, content writes, observability, and abuse-resistant design. The engineer will translate product risks into robust architecture, reusable guardrails, automated tests, and production systems to ensure safe feature releases. This position is based in San Francisco, with a hybrid work arrangement requiring in-office presence on Mondays, Tuesdays, and Thursdays.
Responsibilities
- Define and build security architecture for product surfaces handling customer workspace content, including tool execution, content writes, retrieval, permission checks, provenance, and auditability.
- Develop reusable libraries, review patterns, test fixtures, and guardrails to simplify secure development for product teams.
- Implement automated red-team and regression testing for risks like prompt injection, indirect instruction following, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace mutations.
- Translate threat models for new product surfaces into engineering requirements, production checks, and launch criteria.
- Harden Notion over time using production signals, incident learnings, and experiments, feeding insights back into architecture and developer workflows.
- Establish security standards for engineers using coding agents, MCP-enabled tools, hooks, and internal automation.
Requirements
- 8-10+ years of experience designing, building, or securing complex software systems.
- Comfortable working in production code with product and platform engineers.
- Strong security architecture judgment to identify and improve permissions, data flow, and trust boundaries in complex systems.
- Ability to translate complex security risks into actionable product designs or architectures.
- A builder mindset focused on creating useful tools, tests, libraries, or patterns.
Benefits
- Highly competitive cash compensation
- Equity
- Benefits