Senior Staff Security Engineer, Amplitude
Product analytics company
Open for applications
Product analytics company
501-1000 employees
Open for applications
501-1000 employees
Company mission
To be the epicenter of digital business.
Role
Who you are
- Your ability to communicate effectively, build trust, and drive results in a fast-paced environment will be key to success
- 8+ years of experience in security engineering, with a focus on secure software development
- Strong background in cloud security (AWS), including IAM, VPC, and security monitoring tools
- A history of using cloud-native tools like Kubernetes to “shift left” in order to build security into the foundations of the develop/build/release process
- Expertise in modern development practices and languages (e.g., Python, Java, Typescript)
- Experience building security into CI/CD pipelines (security as code, infrastructure as code)
- Experience automating security tasks using scripting languages (Python, Bash, etc.)
- Strong communication skills, especially in conveying security risks to non-security stakeholders, and the ability to navigate high-pressure environments
- Proven ability to influence and drive security initiatives in an organization while fostering a culture of collaboration and mutual respect
- Willingness to go beyond traditional responsibilities to help fix issues directly when needed
What the job involves
- As a Senior Staff Security Engineer, you will play a key role in building a security-minded culture within our software development lifecycle (SDLC)
- You’ll work with product engineering teams to provide security oversight, review code, and influence architectural decisions that allow us to meet enterprise-grade security expectations
- In this role, technical expertise is essential, but equally important are collaboration, patience, and a strong sense of ownership
- You won’t just identify issues—you'll be expected to go above and beyond by sometimes submitting pull requests (PRs) to fix security issues directly in other developers’ codebases
- Collaborate closely with product engineering teams to assess design and implementation risks and influence secure development practices
- Conduct in-depth code reviews and security assessments, identifying issues and providing recommendations—and sometimes fixes—directly in codebases
- Develop automation and tooling to embed security within our CI/CD pipelines
- Lead the design and implementation of security features in the cloud infrastructure, particularly on AWS
- Mentor junior engineers and foster security awareness across the company
- Assist in building out detection and response capabilities, with a focus on reducing security risks and responding to threats in a timely manner
- Contribute to the improvement of existing security tools and processes or build new ones where gaps exist
- Participate in cross-functional collaboration with the cloud platform and DevOps teams to ensure the security of our infrastructure and cloud environments
- Support regulatory compliance efforts (SOC2, ISO, etc.), ensuring security controls are met
Our take
Amplitude provides product analytics to help companies understand user behaviour. Product, marketing, and growth teams use Amplitude to discover and share insights about user engagement, retention, and revenue.
Amplitude’s user flows reveal which actions are the most commonly taken after users sign up, and which usually precede purchases made in-app, creating paths through the app. The behaviour of individual app users can be viewed with unlimited real-time activity feeds and user timelines.
Thousands of companies use Amplitude analytics including Microsoft, Under Armour, Intuit, Twitter, Bonobos, Peloton, and many more. In 2024, a securities fraud case was filed against Amplitude due to an IPO and stock share rise that was alleged to be artificially inflated before their downturn in 2022. Whilst this case is ongoing, Amplitude is still releasing new products and operating at full capacity.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Some candidates hear
back within 2 weeks
0% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Jun 2021
$150m
LATE VC
May 2020
$50m
SERIES E
Total funding: $336m
Company benefits
- We offer a generous 12-week parental leave for fathers/partners and 18-20 weeks for new birthing parents. This leave policy also provides flexible scheduling so you can spend time with your family and bond with your little one. Specific leave policy will vary by country
- We believe it’s important to unplug from work to reset and recharge. We offer flexible vacation time and unlimited PTO — and we encourage you to use it!
- We provide a monthly stipend for the wellness activity of your choosing, from gym memberships and fitness classes to acupuncture and massages
- Equity is an important component of compensation, but it should benefit you (not just the company). In addition to offering competitive RSU grants that vest quarterly over three years, our Employee Stock Purchase Plan gives employees the option to buy below market price
Company values
- Humility - For Amplitude, humility is all about checking its egos at the door.
- Ownership - Ownership means that Amplitude can take the initiative to solve problems that drive its shared company success.
- Growth Mindset - A growth mindset is essential to ensuring every employee at Amplitude can advance their career.
Company HQ
Yerba Buena, San Francisco, CA
Articles
Leadership
Spenser Skates
(CEO)Previously worked as an Algorithmic Trader, Researcher at DRW Trading Group. They co-found Sonalight but are no longer working at the company.
Curtis Liu
(CTO)Previously worked as a Teaching Assistant at MIT and as a Software Engineer at Google. They co-found Sonalight but are no longer working at the company.
Jeffrey Wang
(Chief Architect)They studied computer science at university. They have extensive experience in software engineering prior to co-founding Amplitude.
People progressing
Joined as Recruiting and Front Desk Coordinator, promoted to Recruiting Operations Associate after 9 months and again to Technical Recruiter after 5 months. They were promoted again to Senior Technical Recruiter in September 2021.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 17 more jobs at Amplitude