Notion
Software Engineer, AI Product Security
$270K–$340K
San Francisco, California +1 · Hybrid · Full-time · Posted Jun 9, 2026
- Location
- San Francisco, California
New York, New York - Experience
- 8–10+ years.
About the job
Designs and builds security foundations, architecture, and safeguards for Notion’s AI product features so teams can ship them safely.
What you'll do
- Build security architecture, reusable guardrails, libraries, and automated tests for AI product features and customer workspace content.
- Develop red-team and regression testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace changes.
- Translate threat models and production learnings into engineering requirements, launch criteria, and improved security practices.
What they ask for
- 8–10+ years of experience designing, building, or securing complex software systems.
- Ability to work with production code alongside product and platform engineers.
- Strong security architecture judgment across permissions, data flows, and trust boundaries.
- Ability to turn security risks into buildable product designs or architecture.
Nice to have
- Experience with tool use, retrieval, workflow automation, content writes, or complex permission boundaries.
- Experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design.
Pay
$270,000 - $340,000 per year (USD, base salary)
Tools
MCP
AI focus
Secure AI product capabilities including agent runtimes, tool permissions, retrieval, content writes, prompt-injection defenses, red teaming, and safe use of coding agents and MCP-enabled tools.
Model-written summary · the original posting is authoritative