About the Role:
We're looking for a Senior Full-Stack Engineer with deep experience in GraphQL development and a strong understanding of API security best practices. You’ll be responsible for designing, building, and securing GraphQL services that power critical features in our platform.
You'll collaborate closely with product, frontend, and backend teams to ensure GraphQL APIs are not only performant and scalable, but also secure by design, incorporating principles such as role-based access control (RBAC), audit logging, input validation, and resolver-level authorization.
You’ll play a key role in evolving our GraphQL infrastructure and setting the standard for secure and maintainable API development across the engineering org.
Key Responsibilities:
- Design, develop, and maintain robust and scalable GraphQL APIs for core features and services
- Implement security controls within the GraphQL layer, including:
- RBAC or ABAC models enforced at the resolver level
- Query complexity and depth limiting to prevent DoS
- Auditable logging for sensitive GraphQL operations
- Input validation and type safety for all queries/mutations
- Work closely with backend and frontend engineers to ensure GraphQL usage patterns are efficient and secure
- Help define best practices for GraphQL schema design, versioning, and access control
- Identify and remediate security issues in GraphQL endpoints proactively, collaborating with application security engineers when necessary
- Partner with engineering to identify and mitigate risks in architecture, design, and implementation stages
- Identify opportunities to fix systemic gaps, reduce recurring pain points, and avoid reactive “whack-a-mole” cycles
- Participate in an on-call rotation to resolve critical/high-risk security issues as well as respond to security incidents with urgency and clarity
- Stay up to date with emerging threats and defensive patterns in GraphQL security
What We’re Looking For:
- 4+ years of experience as a software engineer, with at least 2+ years working with GraphQL in production systems
- Proven experience building and maintaining secure, large-scale APIs, particularly using GraphQL, TypeScript, Python, or Java
- Strong understanding of authentication and authorization, especially as it applies to API design (e.g., JWT, OAuth2, resolver-level access control)
- Familiarity with audit logging, rate limiting, and schema hardening
- Comfortable collaborating cross-functionally to align API security with product needs and developer experience
- Willingness to go above and beyond, including submitting fixes and supporting teams directly when needed
- Experience using AI to automate tasks is a significant plus (e.g. log analysis, code review, alert triage)
- Familiarity with application security concepts is preferred, but not required
Who We Are
The Company: Amplitude is filled with humble, life-long learners who are eager to help one another and the company succeed. Our values of growth mindset, ownership, and humility are core to the way we work: we’re tenacious in the face of challenges, we take the initiative to solve problems that drive our shared success, and we operate from a place of empathy and openness, seeking to understand many points of view.
The Product: Amplitude is a digital analytics platform—we help companies capture data they can trust, uncover clear insights about customer behavior, and take faster action. This empowers teams to build better product experiences that drive business growth. We’re super proud of what we’ve built and continue to expand: a platform that empowers companies to thrive in the digital era.
We care about the well-being of our team: We offer competitive pay and benefits packages that reflect our commitment to the health and well-being of our Ampliteers.
Some of our benefit programs include:
- Excellent medical, dental and vision insurance coverages, with 100% employer-paid premiums for employee medical, dental, vision on select plans
- Flexible time off, paid holidays, and more
- Generous stipends to spend on what matters most to you, whether that’s wellness (monthly), commuter transit/parking (monthly), learning and development (quarterly), home office equipment (annual), and much more
- Excellent Parental benefits including: 12-20 weeks of Paid Parental Leave, Carrot Fertility Benefits/Adoption/Surrogacy support, Back-up Child Care support
- Mental health and wellness benefits including no cost employee access to Modern Health coaching & therapy Sessions and high quality physician office experience via One Medical membership (select U.S. locations only)
- Employee Stock Purchase Program (ESPP)
Other fun facts about Amplitude:
- We were recognized in the Newsweek Excellence Index 2024.
- Our customers love us! They've said we're the #1 product analytics solution for 15 quarters in a row on G2.
- We're focused on growth. Check us out in Deloitte’s 2023 Technology Fast 500™
- We care A LOT about product innovation. Fast Company called us the #3 most innovative enterprise company in the world.
- We invest in our people. We offer mentorship programs, management training, and wellness initiatives.
- We give back to our communities. We give every Ampliteer a charitable giving grant and paid volunteer time off.
- We were founded in 2012, went public via a direct listing in September 2021, and are now trading under the ticker $AMPL.
- We’re a global and fast-growing team! We have employees around the world and offices in San Francisco (HQ), New York, Vancouver, Amsterdam, London, Paris, Singapore, and Tokyo.
- Our mascot is the datamonster, who loves to chow down on numbers, charts, and graphs. Nom nom.
Amplitude provides equal employment opportunities (EEO). All applicants are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, or sexual orientation.
This role is eligible for equity, benefits and other forms of compensation.
Based on legislation in California, the following details are for individuals who will work for Amplitude in San Francisco Bay Area of California. Salary range: $161,000 - $266,000 total target cash (inclusive of bonus or commission) plus equity.
#LI-JJ1
#LI-Hybrid
By applying for this job, you acknowledge that Amplitude processes your personal data in accordance with the Amplitude Applicant Privacy Notice.
Staying Safe - Protect Yourself From Recruitment Fraud
We are aware of individuals and entities fraudulently representing themselves as Amplitude recruiters and/or hiring managers. Amplitude will never ask for financial information or payment, or for personal information such as bank account number or social security number during the job application or interview process. Any emails from the Amplitude recruiting team will come from an @amplitude.com email address. You can learn more about how to protect yourself from these types of fraud by referring to this article. Please exercise caution and cease communications if something feels suspicious about your interactions.
Amplitude is a leading digital analytics platform that helps companies unlock the power of their products. More than 3,500 customers, including Atlassian, Jersey Mike’s, NBCUniversal, Shopify, and Under Armour, rely on Amplitude to gain self-service visibility into the entire customer journey. Amplitude guides companies every step of the way as they capture data they can trust, uncover clear insights about customer behavior, and take faster action. When teams understand how people are using their products, they can deliver better product experiences that drive growth.
As an organization, we approach challenges with humility, take ownership of our contributions, and embrace a growth mindset that pushes us to constantly improve ourselves, each other, and the value we bring to customers and partners.
Amplitude’s Commitment to Diversity Equity & Inclusion (DEI): Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions. We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.
