Software Engineer, Notion

• Security architecture and expertise: You have experience building systems to secure and monitor cloud architectures. You can contribute directly to our main codebase to raise the bar on security systems design and address vulnerabilities. You bring experience in a number of following areas:
• Threat modeling
• Securing a cloud-based infrastructure (e.g. AWS)
• Designing a secure development life cycle (design reviews, CI / CD integrations, bug bounty program)
• Application security consulting
• Secure library and framework development
• Vulnerability discovery and response
• Implement core security features like authentication to detecting and mitigating malicious activity
• Offensive thinking (e.g. pentesting, red teaming)
• Working in production: You have experience debugging systems in production. You appreciate the skill and challenge of continuously improving production components with minimal user disruption
• Pragmatic and business-oriented: You care about business impact and prioritize projects accordingly — you model threat risks and balance the right security investments with the right bottom line outcomes
• Not ideological about technology: To you, technologies and programming languages are about tradeoffs. You may be opinionated, but you're not ideological and can learn new technologies as you go
• Empathetic communication: You communicate nuanced ideas clearly, whether you're explaining technical decisions in writing or brainstorming in real time. In disagreements, you engage thoughtfully with other perspectives and compromise when needed
• Team player: For you, work isn't a solo endeavor. You enjoy collaborating cross-functionally to accomplish shared goals, and you care about learning, growing, and helping others to do the same
• If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply
• If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you

Desirable

• In this role, we are looking for a founding member of an elite security engineering team that is responsible for all aspects of ensuring the security of our platform and users
• You will be one of Notion’s foremost security expert, understanding the full attack surface of our product and working with a broad range of teams to secure it
• You'll help scale the engineering organization and mentor engineers on best practices in secure software design and architecture
• You’ll enable the growth of Notion’s business by building a secure foundation that earns the trust of Notion’s users
• You’ll design, implement, and (where possible) automate a software development life cycle that balances good vulnerability and risk detection coverage with developer velocity
• You'll act as a liaison for multiple stakeholders across product, engineering, go to market, and security ops / compliance, to guide and prioritize the right security investments
• You'll participate in security assessments and advise on on both internal and customer security and privacy needs (e.g. SOC2, ISO 27001, GDPR, penetration testing, enterprise asks)