Software Engineer, AI Product Security

The role

You will design and build secure software systems to define security foundations for AI products. You will work with product and engineering teams on agent runtimes, tool permissions, retrieval, and abuse-resistant design.

What you will do

• Define and build security architecture for product surfaces including tool execution, content writes, retrieval, and permission checks.
• Ship reusable libraries, review patterns, test fixtures, and guardrails.
• Build automated red-team and regression testing for risks like prompt injection and data exfiltration.
• Translate threat models into engineering requirements, production checks, and launch criteria.
• Use production signals and incident learnings to harden Notion.
• Help define the security bar for how engineers use coding agents and MCP-enabled tools.

Required qualifications

• 8-10+ years of experience designing, building, or securing complex software systems.
• Security architecture judgment to reason about permissions, data flow, or trust boundaries.
• Security product strategy to turn complex security risks into product design or architecture.
• Builder mindset.

Nice to have

• Experience building or securing products with tool use, retrieval, workflow automation, content writes, or complex permission boundaries.
• Hands-on experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design.
• Experience with enterprise SaaS security models: permissions, sharing, audit logs, data residency, encryption, compliance, or customer-facing trust guarantees.
• Experience building developer tooling, CI checks, coding-agent workflows, MCP integrations, or internal frameworks.
• Public security research, vulnerability writeups, conference talks, or open-source work related to product security or secure developer infrastructure.

Benefits

• Cash compensation
• Equity
• Benefits

About the company

Notion is the collaborative AI workspace where teams and agents think together. Millions of individuals, small teams, and large companies run their work on Notion.