Top Cybersecurity Jobs

Own and improve corporate security engineering controls across identity, endpoints, SaaS, and workforce infrastructure. Harden Okta and Google Workspace, operate endpoint security for macOS and other platforms, govern AI tool usage, reduce SaaS risk, and build Python, Bash, and Terraform automation. Partner with detection and response teams on telemetry, audits, access reviews, onboarding, offboarding, configuration drift, and incidents including phishing, account compromise, lost devices, and business email compromise.

Design and implement secure-by-default cloud infrastructure across AWS: build secrets management and IAM solutions, ship production backend changes, model threats and prioritize risk-based controls, guide partners on security and privacy, and participate in incident response and mitigation.

Build and operate high-signal detections across cloud, identity, endpoints, and SaaS. Improve detection platforms, automation, and triage tooling (including LLM-based workflows). Translate threat TTPs into telemetry and detections, participate in incident response/on-call, track metrics like MTTD and alert quality, and drive detection engineering improvements across the org.

Design and build security foundations for AI products, including agent runtimes, tool permissions, retrieval, content writes, observability, and auditability. Create reusable security libraries, guardrails, test fixtures, and automated red-team testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe mutations. Translate threat models into engineering requirements and launch criteria, and continuously harden systems using production signals and incident learnings.

Build and maintain corporate security controls across identity, endpoints, and SaaS. Harden IAM (Okta, Google Workspace), run endpoint security for a macOS-first fleet, secure AI tool usage, reduce SaaS risk with SSPM and automation, and write Python/Terraform to automate access reviews, onboarding/offboarding, and audit evidence. Partner with Detection & Response and support SOC 2/ISO 27001 compliance and corporate incident response.

Join Notion's Detection and Response team as a Security Operations Engineer, focusing on investigating security events and mentoring junior engineers, ensuring operational excellence in security practices.