Senior GraphQL Engineer, Amplitude
Security
$161-266k
Salary range is inclusive of bonus or commission. Offers ESPP and Equity
Product analytics company
Be an early applicant
Product analytics company
501-1000 employees
Be an early applicant
$161-266k
Salary range is inclusive of bonus or commission. Offers ESPP and Equity
501-1000 employees
Company mission
To be the epicenter of digital business.
Role
Who you are
- 4+ years of experience as a software engineer, with at least 2+ years working with GraphQL in production systems
- Proven experience building and maintaining secure, large-scale APIs, particularly using GraphQL, TypeScript, Python, or Java
- Strong understanding of authentication and authorization, especially as it applies to API design (e.g., JWT, OAuth2, resolver-level access control)
- Familiarity with audit logging, rate limiting, and schema hardening
- Comfortable collaborating cross-functionally to align API security with product needs and developer experience
- Willingness to go above and beyond, including submitting fixes and supporting teams directly when needed
- Experience using AI to automate tasks is a significant plus (e.g. log analysis, code review, alert triage)
- Familiarity with application security concepts is preferred, but not required
What the job involves
- We're looking for a Senior Full-Stack Engineer with deep experience in GraphQL development and a strong understanding of API security best practices. You’ll be responsible for designing, building, and securing GraphQL services that power critical features in our platform
- You'll collaborate closely with product, frontend, and backend teams to ensure GraphQL APIs are not only performant and scalable, but also secure by design, incorporating principles such as role-based access control (RBAC), audit logging, input validation, and resolver-level authorization
- You’ll play a key role in evolving our GraphQL infrastructure and setting the standard for secure and maintainable API development across the engineering org
- Design, develop, and maintain robust and scalable GraphQL APIs for core features and services
- Implement security controls within the GraphQL layer, including:
- RBAC or ABAC models enforced at the resolver level
- Query complexity and depth limiting to prevent DoS
- Auditable logging for sensitive GraphQL operations
- Input validation and type safety for all queries/mutations
- Work closely with backend and frontend engineers to ensure GraphQL usage patterns are efficient and secure
- Help define best practices for GraphQL schema design, versioning, and access control
- Identify and remediate security issues in GraphQL endpoints proactively, collaborating with application security engineers when necessary
- Partner with engineering to identify and mitigate risks in architecture, design, and implementation stages
- Identify opportunities to fix systemic gaps, reduce recurring pain points, and avoid reactive “whack-a-mole” cycles
- Participate in an on-call rotation to resolve critical/high-risk security issues as well as respond to security incidents with urgency and clarity
- Stay up to date with emerging threats and defensive patterns in GraphQL security
Our take
Amplitude provides product analytics to help companies understand user behaviour. Product, marketing, and growth teams use Amplitude to discover and share insights about user engagement, retention, and revenue.
Amplitude’s user flows reveal which actions are the most commonly taken after users sign up, and which usually precede purchases made in-app, creating paths through the app. The behaviour of individual app users can be viewed with unlimited real-time activity feeds and user timelines.
Thousands of companies use Amplitude analytics including Microsoft, Under Armour, Intuit, Twitter, Bonobos, Peloton, and many more. In 2024, a securities fraud case was filed against Amplitude due to an IPO and stock share rise that was alleged to be artificially inflated before their downturn in 2022. Whilst this case is ongoing, Amplitude is still releasing new products and operating at full capacity.
Freddie
Company Specialist at Welcome to the Jungle
Insights
0% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Jun 2021
$150m
LATE VC
May 2020
$50m
SERIES E
Total funding: $336m
Company benefits
- We offer a generous 12-week parental leave for fathers/partners and 18-20 weeks for new birthing parents. This leave policy also provides flexible scheduling so you can spend time with your family and bond with your little one. Specific leave policy will vary by country
- We believe it’s important to unplug from work to reset and recharge. We offer flexible vacation time and unlimited PTO — and we encourage you to use it!
- We provide a monthly stipend for the wellness activity of your choosing, from gym memberships and fitness classes to acupuncture and massages
- Equity is an important component of compensation, but it should benefit you (not just the company). In addition to offering competitive RSU grants that vest quarterly over three years, our Employee Stock Purchase Plan gives employees the option to buy below market price
Company HQ
Yerba Buena, San Francisco, CA
Leadership
Spenser Skates
(CEO)Previously worked as an Algorithmic Trader, Researcher at DRW Trading Group. They co-found Sonalight but are no longer working at the company.
Curtis Liu
(CTO)Previously worked as a Teaching Assistant at MIT and as a Software Engineer at Google. They co-found Sonalight but are no longer working at the company.
Jeffrey Wang
(Chief Architect)They studied computer science at university. They have extensive experience in software engineering prior to co-founding Amplitude.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 41 more jobs at Amplitude