AI Security Engineer, Amplitude

• 2–4 years in IT Security, Enterprise Security, Corporate Security Engineering, or Security Operations with strong enterprise systems exposure
• Hands-on familiarity with SSO/IAM concepts (SAML/OIDC basics, SCIM provisioning fundamentals, group/role-based access)
• Comfortable doing access reviews: interpreting entitlements, spotting over-permissioning, documenting decisions, and following up with stakeholders
• Experience supporting security controls in enterprise tooling (Google Workspace / Microsoft, Okta, device management, SaaS admin consoles)
• Some scripting/automation experience (Python, Bash, or similar) OR strong no-code automation experience with willingness to learn scripting
• Strong attention to detail, documentation habits, and the ability to operationalize policy into repeatable processes

Desirable

• We’re hiring an AI Security Engineer within IT Security to strengthen enterprise security controls for AI tools and AI-enabled workflows used across the company (e.g. , access controls, permissions, data handling, vendor security reviews, and policy enforcement)
• This role is not a product/ML security engineering role; it’s focused on corporate/enterprise systems and how AI usage changes risk in those environments
• You’ll partner closely with IT, Security, Legal/Privacy, and Business Systems to ensure AI tools are used safely, compliantly, and with least privilege, without slowing teams down
• Support day-to-day enterprise security operations across corporate systems: SaaS security posture, identity security, access reviews, device trust alignment, vulnerability management and remediation, and security guardrails
• Help maintain and improve controls for identity and access management (Okta/SSO, group access, roles, provisioning), including periodic access reviews and least-privilege enforcement
• Participate in vendor/tool/AI tool onboarding reviews for enterprise apps, including basic risk evaluations and tracking remediation items
• Help implement and operate AI access controls (who can use which AI tools/features, what data is allowed, and what permissions are required)
• Review and validate AI-related permissions, configurations, and data-sharing settings in enterprise environments (e.g., workspace settings, admin consoles, connectors/integrations)
• Support AI governance requirements: help document controls, maintain inventories of AI tools, and align configurations with internal policy and Legal/Privacy guidance
• Assist with DLP and data handling controls related to AI (what can/can’t be shared, enforcement patterns, exceptions process)
• Build or maintain lightweight scripts/workflows to support visibility and control (e.g., access review exports, policy checks, configuration drift checks, basic alerts)
• Help create dashboards/metrics for AI tool adoption and control posture (inventory completeness, access review completion, policy compliance)
• Participate in incident triage as needed for enterprise/AI tool issues (e.g., over-permissioned access, suspicious sharing, misconfigurations), with guidance from senior engineers