Application Security Engineer, Amplitude
$154-231k
OTE
+ Employee Stock Purchase Program + Eligible for equity. Range is inclusive of bonus or commission
Product analytics company
Open for applications
Product analytics company
501-1000 employees
Open for applications
$154-231k
OTE
+ Employee Stock Purchase Program + Eligible for equity. Range is inclusive of bonus or commission
501-1000 employees
Company mission
To be the epicenter of digital business.
Role
Who you are
- 2 - 4 years of experience in software development or security engineering roles, ideally with a focus on secure application development
- Comfortable writing production-quality code in at least one backend language (e.g. TypeScript, Python, Java)
- Understanding of API security principles and common web application vulnerabilities (e.g. OWASP Top 10)
- Familiarity with CI/CD pipelines and containerized environments such as Kubernetes
- Interest or experience with AI/ML tools for security automation
- A collaborative mindset and willingness to take ownership of problems
- A bias toward action; you’re willing to roll up your sleeves and fix issues directly
What the job involves
- We’re looking for an Application Security Engineer II to help scale secure software development practices across our engineering organization. This role is ideal for an engineer who enjoys working at the intersection of security and development; someone who has written and shipped code, understands how modern software is built, and wants to focus on proactively preventing vulnerabilities
- You’ll work closely with other security engineers and cross-functional developers to design and implement security controls, contribute to tooling and frameworks, and help identify and mitigate risks earlier in the development lifecycle. You won’t just report issues, you’ll help fix issues and make it easier for others to avoid them
- Contribute to building and maintaining secure-by-default development patterns, libraries, and templates (“golden paths”)
- Implement security checks in CI/CD workflows (e.g. GitHub Actions, Argo Workflows) and in runtime environments (e.g. Kubernetes admission controllers)
- Leverage AI/ML tools to automate code review, alert triage, log analysis, and threat detection for application-layer risks
- Write and tune rules to catch insecure code patterns and prevent critical vulnerabilities from reaching production
- Collaborate with developers to remediate security issues by offering clear guidance and, where needed, hands-on support
- Contribute to internal tooling and frameworks to make secure development frictionless and fast
- Participate in an on-call rotation for urgent security issues and incident response
Our take
Amplitude provides product analytics to help companies understand user behaviour. Product, marketing, and growth teams use Amplitude to discover and share insights about user engagement, retention, and revenue.
Amplitude’s user flows reveal which actions are the most commonly taken after users sign up, and which usually precede purchases made in-app, creating paths through the app. The behaviour of individual app users can be viewed with unlimited real-time activity feeds and user timelines.
Thousands of companies use Amplitude analytics including Microsoft, Under Armour, Intuit, Twitter, Bonobos, Peloton, and many more. In 2024, a securities fraud case was filed against Amplitude due to an IPO and stock share rise that was alleged to be artificially inflated before their downturn in 2022. Whilst this case is ongoing, Amplitude is still releasing new products and operating at full capacity.
Freddie
Company Specialist at Welcome to the Jungle
Insights
0% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Jun 2021
$150m
LATE VC
May 2020
$50m
SERIES E
Total funding: $336m
Company benefits
- We offer a generous 12-week parental leave for fathers/partners and 18-20 weeks for new birthing parents. This leave policy also provides flexible scheduling so you can spend time with your family and bond with your little one. Specific leave policy will vary by country
- We believe it’s important to unplug from work to reset and recharge. We offer flexible vacation time and unlimited PTO — and we encourage you to use it!
- We provide a monthly stipend for the wellness activity of your choosing, from gym memberships and fitness classes to acupuncture and massages
- Equity is an important component of compensation, but it should benefit you (not just the company). In addition to offering competitive RSU grants that vest quarterly over three years, our Employee Stock Purchase Plan gives employees the option to buy below market price
Company HQ
Yerba Buena, San Francisco, CA
Leadership
Spenser Skates
(CEO)Previously worked as an Algorithmic Trader, Researcher at DRW Trading Group. They co-found Sonalight but are no longer working at the company.
Curtis Liu
(CTO)Previously worked as a Teaching Assistant at MIT and as a Software Engineer at Google. They co-found Sonalight but are no longer working at the company.
Jeffrey Wang
(Chief Architect)They studied computer science at university. They have extensive experience in software engineering prior to co-founding Amplitude.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 28 more jobs at Amplitude