Security Engineer, Detection and Response, San Francisco

Hands-on detection engineer responsible for designing and operating high-signal detections across Notion’s cloud, identity, endpoints, and SaaS environments. You’ll build and improve the detection platform, automate triage and investigation, translate threat intel into durable telemetry, participate in incident response and postmortems, and define metrics to guide security investments in a cloud-native environment.