Loading…

Company: Notion clear filter
Saturday, September 12
 

10:30am CDT

Paving the Road for AI-Driven Security Teams
Saturday September 12, 2026 10:30am - 11:30am CDT
We are not a traditional SOC. Notion’s Detection and Response Team (DART) is a small group of engineers and incident responders. We build the systems our own team runs on, and we own them end to end.
AI changed how we work. Our answer has been to pave the road for agentic security work: an internal platform of harnesses, CLI tools, review steps, and guardrails that makes AI workflows predictable enough to run during a real incident, and safe enough for other security teams to build on top of.
We will cover three things:
  1. Setting up AI agents for triage and investigations in a way we actually trust
  2. The boring stuff that makes it work. Harnesses, CLI tools, and review steps so agent runs are repeatable and we can actually check what happened
  3. What that paved road unlocks, using security automations as the example. DART owns and runs the platform, so other security teams can ship new automations on top of it without having to learn the underlying infra
You’ll leave with the guardrails we actually use, patterns for making agent workflows deterministic, and the lessons we picked up scaling our automation and observability work.
Speakers
avatar for Joakim Pedersen

Joakim Pedersen

Detection and Response Engineer, Notion
Joakim is a Detection and Response engineer at Notion, focusing on detection engineering, incident response, and observability. With a background in offensive security, he brings an attacker mindset to defending cloud infrastructure at a global scale.
avatar for Britton Hayes

Britton Hayes

Detection and Response Engineer, Notion
Britton is a detection and response engineer building tools to keep security simple. Currently at Notion focusing on incident response, security automation, and detection engineering. Previously, he architected observability pipelines at Fortune 500 scale and secured Kubernetes infrastructure... Read More →
Saturday September 12, 2026 10:30am - 11:30am CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA
  Talk
 
Blue Team Con 2026
From $0.00
Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.