Application Security Engineer, Amplitude
AI Security
$154-231k
OTE
OTE inclusive of bonus or commission + Employee Stock Purchase Program (ESPP) + Equity
More information about location
2 days a week in office
Product analytics company
Be an early applicant
Product analytics company
501-1000 employees
Be an early applicant
$154-231k
OTE
OTE inclusive of bonus or commission + Employee Stock Purchase Program (ESPP) + Equity
More information about location
2 days a week in office
501-1000 employees
Company mission
To be the epicenter of digital business.
Role
Who you are
- 2 - 5 years of experience in application or product security roles
- Hands-on software development experience in at least one backend language (e.g. Python, TypeScript, Java)
- Strong understanding of API security, authentication, and common web vulnerabilities (OWASP Top 10)
- Experience or interest in AI/ML system security, including LLM application threat modeling or prompt security
- Familiarity with CI/CD pipelines and modern deployment environments (e.g., Kubernetes, GitHub Actions)
What the job involves
- We’re looking for an Application Security Engineer II to help secure Amplitude’s emerging AI-powered features, from chatbots to agentic systems
- This role is ideal for a security engineer who loves working at the intersection of AI, application security, and product development; someone who can threat model novel attack surfaces, partner with engineers to design safer systems, and build guardrails that make secure innovation easier
- You’ll work closely with developers, AI product teams, and security peers to evaluate risks in AI-driven features (such as LLM-based assistants, connectors, and agent integrations), guide secure design, and implement automated defenses across the stack
- This is a hands-on role where you’ll help shape how we approach security for AI features at scale
- You won’t just report issues, you’ll help fix issues and make it easier for others to avoid them
- Contribute to building and maintaining secure-by-default development patterns, libraries, templates and model interaction patterns (“golden paths”)
- Implement security and AI-specific checks in CI/CD workflows (e.g. GitHub Actions, Argo Workflows) and in runtime environments (e.g. Kubernetes admission controllers)
- Leverage AI/ML tools to automate code review, alert triage, log analysis, and threat detection for application-layer risks
- Develop and maintain security guardrails, input/output filters, and policy enforcement layers for LLM interactions
- Write and tune rules to catch insecure code patterns and prevent critical vulnerabilities from reaching production
- Conduct threat modeling and security design reviews for AI-related products, such as chatbots, model-connected platforms (MCPs), and autonomous agents
- Contribute to internal penetration tests against AI systems
- Collaborate with developers to remediate security issues by offering clear guidance and, where needed, hands-on support
- Contribute to internal tooling and frameworks to make secure development frictionless and fast
Our take
Amplitude provides product analytics to help companies understand user behaviour. Product, marketing, and growth teams use Amplitude to discover and share insights about user engagement, retention, and revenue.
Amplitude’s user flows reveal which actions are the most commonly taken after users sign up, and which usually precede purchases made in-app, creating paths through the app. The behaviour of individual app users can be viewed with unlimited real-time activity feeds and user timelines.
Thousands of companies use Amplitude analytics including Microsoft, Under Armour, Intuit, Twitter, Bonobos, Peloton, and many more. In 2024, a securities fraud case was filed against Amplitude due to an IPO and stock share rise that was alleged to be artificially inflated before their downturn in 2022. Whilst this case is ongoing, Amplitude is still releasing new products and operating at full capacity.
Freddie
Company Specialist at Welcome to the Jungle
Insights
0% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jun 2021
$150m
LATE VC
May 2020
$50m
SERIES E
Total funding: $336.2m
Company benefits
- We offer a generous 12-week parental leave for fathers/partners and 18-20 weeks for new birthing parents. This leave policy also provides flexible scheduling so you can spend time with your family and bond with your little one. Specific leave policy will vary by country
- We believe it’s important to unplug from work to reset and recharge. We offer flexible vacation time and unlimited PTO — and we encourage you to use it!
- We provide a monthly stipend for the wellness activity of your choosing, from gym memberships and fitness classes to acupuncture and massages
- Equity is an important component of compensation, but it should benefit you (not just the company). In addition to offering competitive RSU grants that vest quarterly over three years, our Employee Stock Purchase Plan gives employees the option to buy below market price
Company HQ
Yerba Buena, San Francisco, CA
Leadership
Spenser Skates
(CEO)Previously worked as an Algorithmic Trader, Researcher at DRW Trading Group. They co-found Sonalight but are no longer working at the company.
Curtis Liu
(CTO)Previously worked as a Teaching Assistant at MIT and as a Software Engineer at Google. They co-found Sonalight but are no longer working at the company.
Jeffrey Wang
(Chief Architect)They studied computer science at university. They have extensive experience in software engineering prior to co-founding Amplitude.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 29 more jobs at Amplitude