Why This Job is Featured on The SaaS Jobs
Amplitude sits in the product-analytics layer of the SaaS ecosystem, where customer data, identity, and integrations converge at scale. Featuring an Application Security Engineer focused on AI highlights a shift many SaaS platforms are navigating: adding LLM-driven assistants and agentic workflows without widening the application attack surface. The remit spans novel risks—prompt injection, model-connected platforms, and connector abuse—alongside the realities of securing a mature cloud product.
For a SaaS security career, this role offers durable leverage: building “secure-by-default” patterns that product teams can adopt repeatedly, then enforcing them through CI/CD and runtime controls. The emphasis on guardrails, policy layers, and rule tuning maps to how modern SaaS security programs reduce recurring classes of issues rather than treating findings as one-offs. Experience applying automation to code review and detection also translates well across SaaS companies standardizing on GitHub-based pipelines and Kubernetes.
This position suits an engineer who prefers hands-on partnership with developers and wants security to be embedded in product delivery, not isolated in audits. It also fits someone comfortable moving between threat modeling and implementation details, especially where AI features create ambiguous boundaries between application logic and model behavior.
The section above is editorial commentary from The SaaS Jobs, provided to help SaaS professionals understand the role in a broader industry context.
Job Description
We’re looking for an Application Security Engineer II to help secure Amplitude’s emerging AI-powered features, from chatbots to agentic systems. This role is ideal for a security engineer who loves working at the intersection of AI, application security, and product development; someone who can threat model novel attack surfaces, partner with engineers to design safer systems, and build guardrails that make secure innovation easier.
You’ll work closely with developers, AI product teams, and security peers to evaluate risks in AI-driven features (such as LLM-based assistants, connectors, and agent integrations), guide secure design, and implement automated defenses across the stack. This is a hands-on role where you’ll help shape how we approach security for AI features at scale. You won’t just report issues, you’ll help fix issues and make it easier for others to avoid them.
Key Responsibilities:
- Contribute to building and maintaining secure-by-default development patterns, libraries, templates and model interaction patterns (“golden paths”)
- Implement security and AI-specific checks in CI/CD workflows (e.g. GitHub Actions, Argo Workflows) and in runtime environments (e.g. Kubernetes admission controllers)
- Leverage AI/ML tools to automate code review, alert triage, log analysis, and threat detection for application-layer risks
- Develop and maintain security guardrails, input/output filters, and policy enforcement layers for LLM interactions
- Write and tune rules to catch insecure code patterns and prevent critical vulnerabilities from reaching production
- Conduct threat modeling and security design reviews for AI-related products, such as chatbots, model-connected platforms (MCPs), and autonomous agents
- Contribute to internal penetration tests against AI systems
- Collaborate with developers to remediate security issues by offering clear guidance and, where needed, hands-on support
- Contribute to internal tooling and frameworks to make secure development frictionless and fast
What We’re Looking For:
- 2 - 5 years of experience in application or product security roles
- Hands-on software development experience in at least one backend language (e.g. Python, TypeScript, Java)
- Strong understanding of API security, authentication, and common web vulnerabilities (OWASP Top 10)
- Experience or interest in AI/ML system security, including LLM application threat modeling or prompt security
- Familiarity with CI/CD pipelines and modern deployment environments (e.g., Kubernetes, GitHub Actions)
Who We Are
The Company: Amplitude is filled with humble, life-long learners who are eager to help one another and the company succeed. Our values of growth mindset, ownership, and humility are core to the way we work: we’re tenacious in the face of challenges, we take the initiative to solve problems that drive our shared success, and we operate from a place of empathy and openness, seeking to understand many points of view.
The Product: Amplitude is a digital analytics platform—we help companies capture data they can trust, uncover clear insights about customer behavior, and take faster action. This empowers teams to build better product experiences that drive business growth. We’re super proud of what we’ve built and continue to expand: a platform that empowers companies to thrive in the digital era.
We care about the well-being of our team: We offer competitive pay and benefits packages that reflect our commitment to the health and well-being of our Ampliteers.
Some of our benefit programs include:
- Excellent medical, dental and vision insurance coverages, with 100% employer-paid premiums for employee medical, dental, vision on select plans
- Flexible time off, paid holidays, and more
- Generous stipends to spend on what matters most to you, whether that’s wellness (monthly), commuter transit/parking (monthly), learning and development (quarterly), home office equipment (annual), and much more
- Excellent Parental benefits including: 12-20 weeks of Paid Parental Leave, Carrot Fertility Benefits/Adoption/Surrogacy support, Back-up Child Care support
- Mental health and wellness benefits including no cost employee access to Modern Health coaching & therapy Sessions and high quality physician office experience via One Medical membership (select U.S. locations only)
- Employee Stock Purchase Program (ESPP)
Other fun facts about Amplitude:
- We were recognized in the Newsweek Excellence Index 2024.
- Our customers love us! They've said we're the #1 product analytics solution for 15 quarters in a row on G2.
- We're focused on growth. Check us out in Deloitte’s 2023 Technology Fast 500™
- We care A LOT about product innovation. Fast Company called us the #3 most innovative enterprise company in the world.
- We invest in our people. We offer mentorship programs, management training, and wellness initiatives.
- We give back to our communities. We give every Ampliteer a charitable giving grant and paid volunteer time off.
- We were founded in 2012, went public via a direct listing in September 2021, and are now trading under the ticker $AMPL.
- We’re a global and fast-growing team! We have employees around the world and offices in San Francisco (HQ), New York, Vancouver, Amsterdam, London, Paris, Singapore, and Tokyo.
- Our mascot is the datamonster, who loves to chow down on numbers, charts, and graphs. Nom nom.
"This role is eligible for equity, benefits and other forms of compensation.
Based on Colorado law, the following details are for individuals who will work for Amplitude in Colorado. Colorado range: $138,000 - $207,000 total target cash (inclusive of bonus or commission)
Based on legislation in New York City, the following details are for individuals who will work for Amplitude in New York City. New York City salary range: $154,000 - $231,000 total target cash (inclusive of bonus or commission)
Based on legislation in California, the following details are for individuals who will work for Amplitude in San Francisco Bay Area of California. Salary range: $154,000 - $231,000 total target cash (inclusive of bonus or commission)
Based on legislation in California, the following details are for individuals who will work for Amplitude in California outside of the San Francisco Bay Area. California salary range: $138,000 - $207,000 total target cash (inclusive of bonus or commission)
Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington state. Washington salary range: $138,000 - $207,000 total target cash (inclusive of bonus or commission)
Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington only: unlimited PTO, 10 to 13 holidays annually (will vary), medical dental and vision PPO and CDHP plans. Finally, a company sponsored 401(k) retirement plan."
“Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.”
