Security Engineer – Detection & Response

About the role

Notion is looking for a hands‑on Detection Engineer to design, build, and operate the systems that detect and respond to attacks across its cloud‑native environment. You will work closely with Engineering, Corporate Security, and Infrastructure, shaping detection and response as a software engineering discipline.

Key responsibilities

• Design and maintain high‑signal detections across cloud, identity, endpoints, and SaaS environments.
• Build and improve the detection platform, handling rule lifecycle, tuning, measurement, and safe rollout.
• Develop tooling and automation to accelerate triage, enrichment, investigation, and detection authoring, including LLM‑based workflows where useful.
• Translate threat intelligence and adversary TTPs into durable detections, telemetry requirements, and response improvements.
• Participate in investigations, incident response, and post‑mortems that drive long‑term security improvements.
• Define and track metrics such as coverage, mean‑time‑to‑detect (MTTD), and alert quality to guide investment decisions.
• Participate in a shared on‑call rotation for incident response.

Required profile

• 6+ years of experience in detection engineering, security operations, incident response, or threat hunting.
• Proven ability to build and operate production detections with strong signal quality and sustainable tuning.
• Fluency in one or more detection languages such as Sigma, KQL, SPL, YARA‑L, EQL, or Panther.
• Offensive security mindset with experience leading purple‑team, blue‑team, or adversary‑emulation exercises.
• Strong cloud security experience in AWS, GCP, or Azure, especially identity‑focused attack detection.
• Hands‑on experience with SIEM, EDR, and SOAR platforms at large scale.
• Excellent written communication through design docs, runbooks, and incident reports, and ability to drive projects independently.

Required skills

• Sigma
• KQL
• SPL
• YARA‑L
• EQL
• Panther
• AWS
• GCP
• Azure
• SIEM
• EDR
• SOAR

What we offer

• Highly competitive cash compensation, equity, and benefits.
• Estimated base salary range €127,000–€142,000 per year.