Job description

WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together youtube.com. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE: Millions of people use Notion every day, and we’re growing quickly. The Infrastructure Security team’s mission is to build a secure-by-default foundation across Notion’s technical stacks—architecting systems that make the secure path the easy path. As an IC4 on this team, you’ll own meaningful infrastructure security problems end-to-end: from identifying risk, to designing pragmatic controls, to shipping secure defaults that scale across engineering. This role can be based in either San Francisco or New York City. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days. WHAT YOU'LL ACHIEVE: - Proactively enhance the security posture of our AWS accounts and cloud infrastructure. - Create secure frameworks for secrets management and authentication/authorization. - Design and deploy robust Identity and Access Management (IAM) solutions. - Provide guidance and education on security and privacy best practices to cross-functional partners. - Participate in (and help drive) mitigation strategies during security-related incident response. SKILLS YOU'LL NEED TO BRING: - Security architecture and expertise: you’ve built and maintained systems to secure cloud architectures, ranging from secrets management to Identity and Access Management solutions. - Backend/infrastructure development: you’ve written and shipped production-grade code, and can contribute to the codebase and architecture to raise the bar on secure systems design. - Working in production: you can debug systems in production and continuously improve components with minimal disruption. - Pragmatic, risk-based prioritization: you model threats, balance trade-offs, and focus security investments where they drive the most business impact. - Empathetic communication: you communicate nuanced ideas clearly in writing and in real time; in disagreements, you engage thoughtfully and look for the right compromise. NICE TO HAVES: - AWS security best practices, zero trust architectures, and/or deep IAM expertise. - Data security or privacy engineering experience. - Experience applying AI tooling to defensive security workflows. - Participation in security communities (local or regional groups, conferences). Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $230,000 - $280,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy notion.notion.site and NYLL 144 notion.notion.site. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Requirements

Must-haves

Proactively enhance the security posture of our AWS accounts and cloud infrastructure.
Create secure frameworks for secrets management and authentication/authorization.
Design and deploy robust Identity and Access Management (IAM) solutions.
Provide guidance and education on security and privacy best practices to cross-functional partners.
Participate in (and help drive) mitigation strategies during security-related incident response.
Security architecture and expertise: you’ve built and maintained systems to secure cloud architectures, ranging from secrets management to Identity and Access Management solutions.
Backend/infrastructure development: you’ve written and shipped production-grade code, and can contribute to the codebase and architecture to raise the bar on secure systems design.
Working in production: you can debug systems in production and continuously improve components with minimal disruption.
Pragmatic, risk-based prioritization: you model threats, balance trade-offs, and focus security investments where they drive the most business impact.
Empathetic communication: you communicate nuanced ideas clearly in writing and in real time; in disagreements, you engage thoughtfully and look for the right compromise.

Nice-to-haves

AWS security best practices, zero trust architectures, and/or deep IAM expertise.
Data security or privacy engineering experience.
Experience applying AI tooling to defensive security workflows.
Participation in security communities (local or regional groups, conferences).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiaws

Platform: ashby
Effort: quick