Application Security Engineer, AI Security

The role

This role sits within Notion's security organization and focuses on the company's AI products. The engineer advises product and engineering teams during feature design, tests AI features directly, and builds ways to catch problems automatically. The work spans architecture, hands-on testing, developer education, and incident response.

What you would do

• Shape security models for new product features before they launch
• Run hands-on tests and build automated adversarial checks for AI and agent behavior
• Recommend architectural changes that remove whole categories of flaws
• Educate developers on secure and private coding practices, including for AI coding assistants
• Lead or support mitigation work during application security incidents

What they asked for

• Six or more years helping product teams design or build secure software
• Strong structured problem-solving with the ability to ask for help when stuck
• Focus on measurable business outcomes and pragmatic prioritization
• Clear communication of technical decisions and threat models to varied audiences
• Comfort working in a fast-moving, unstructured startup environment
• Curiosity about AI tools and willingness to adopt them in daily work

Nice to have

• Experience building AI-enabled applications in production
• Published vulnerability research or AppSec writing, especially on AI topics
• Bug bounty or capture-the-flag participation
• Involvement in local or regional security communities or conferences