Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Engineer, Detection and Response role.
Rezi rewrites your resume against Notion's job description. Free.
Tailor your resume to this Security Engineer, Detection and Response role.
Rezi rewrites your resume against Notion's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Engineer, Detection and Response posting at Notion — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Engineer, Detection and Response posting at Notion — free, in seconds.
About the Role
We are seeking a hands-on Detection Engineer to build and operate systems for detecting and responding to attacks in Notion's cloud-native environment. You will create high-signal detections, enhance the platform, participate in incident response, and contribute to scaling detection and response engineering. This role involves close collaboration with Engineering, Corporate Security, and Infrastructure teams, with significant autonomy to identify needs and drive solutions. Detection and response are viewed as a software engineering discipline, treating detections as code, platforms as products, and emphasizing measurement.
Responsibilities
- Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments.
- Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
- Build tooling and automation to expedite triage, enrichment, investigation, and detection authoring, including LLM-based workflows.
- Translate threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
- Participate in investigations, incident response, and postmortems, implementing lasting fixes based on learnings.
- Help define and track metrics such as coverage, MTTD, and alert quality.
- Join a shared on-call rotation for incident response.
Requirements
- 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role.
- Experience writing or tuning production detections with a focus on signal quality and noise reduction.
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills with a willingness to learn.
- Understanding of attacker methodologies (e.g., MITRE ATT&CK) and ability to apply this to detection strategies.
- Hands-on experience with AWS, GCP, or Azure, including identity and access logs.
- Experience using SIEM, EDR, or SOAR tools.
- Ability to write clearly in runbooks, design documents, and incident notes.
- Capacity to own well-scoped projects end to end.
Skills
- Detection Engineering
- Security Operations
- Incident Response
- Threat Hunting
- Cloud Security
- Identity and Access Management
- Endpoint Security
- SaaS Security
- Detection Platform Development
- Rule Lifecycle Management
- Tooling and Automation
- LLM Workflows
- Threat Intelligence Analysis
- Adversary TTPs
- SIEM
- EDR
- SOAR
- Sigma
- KQL
- SPL
- YARA-L
- EQL
- Panther
- SQL
- Python
- MITRE ATT&CK
- AWS
- GCP
- Azure
- Runbooks
- Design Docs
- Incident Notes
- Project Management
Location
- Onsite
Work Type
- Onsite
- Full-time
Experience Level
- 3+ years
- Entry to Senior level
Salary/Compensations
- $185,000 - $280,000 per year (for San Francisco or New York City roles)
About the Company
- Notion is a collaborative AI workspace where teams and agents think together, providing a unified platform for knowledge, projects, meetings, and AI tools.
- Millions of individuals, small teams, and large companies use Notion to manage their work.
- Notion employees ('Notinos') are focused on craft, building lasting products, and believe in the human element of great work.
- The company aims to set the standard for human collaboration in the AI era, enabling customers to focus on their life's work by automating tasks and managing AI agents.
Equal Opportunity
- Notion is committed to providing highly competitive cash compensation, equity, and benefits.
- The compensation offered will be based on factors such as location, role scope, complexity, and candidate experience.
- Notion hires talented people from diverse backgrounds and encourages applications even if not all qualifications are met.
- Notion is an equal opportunity employer and does not discriminate based on any legally protected characteristic.
- Consideration will be given to qualified applicants with arrest and conviction records, consistent with applicable law.
- Notion provides reasonable accommodations during the application process.
- Notion does not discriminate in hiring or employment decisions based on race, color, religion, national origin, age, sex, marital status, ancestry, disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other legally protected characteristics.
- Notion considers qualified applicants with criminal histories in accordance with federal, state, and local law.
- Notion is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in job application procedures.