Application Security Engineer II (AI Security)

Amplitude is the leading Amplitude is the leading digital analytics platform, helping over 4,300 customers-including Atlassian, Burger King, NBCUniversal, Square, and Under Armour-build better products and digital experiences. With powerful AI Agents embedded across our platform, teams can analyze, test, and optimize user experiences faster than ever. Ranked #1 across multiple categories by G2, Amplitude is the best-in-class solution for product, data, and marketing teams. Learn more at amplitude.com.

As an organization, we deliver for our customers by living our values. We operate from a place of humility, take ownership of problems and successes, approach challenges with a growth mindset, and put our customers at the center of everything we do.

Amplitude's Commitment to Diversity Equity & Inclusion (DEI) : Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions. We strive to create an environment of inclusion-one focused on psychological safety, empathy, and human connection-that will allow employees of all backgrounds to thrive.

We're looking for an Application Security Engineer II to help secure Amplitude's emerging AI-powered features, from chatbots to agentic systems. This role is ideal for a security engineer who loves working at the intersection of AI, application security, and product development; someone who can threat model novel attack surfaces, partner with engineers to design safer systems, and build guardrails that make secure innovation easier.

You'll work closely with developers, AI product teams, and security peers to evaluate risks in AI-driven features (such as LLM-based assistants, connectors, and agent integrations), guide secure design, and implement automated defenses across the stack. This is a hands-on role where you'll help shape how we approach security for AI features at scale. You won't just report issues, you'll help fix issues and make it easier for others to avoid them.

Key Responsibilities :

• Contribute to building and maintaining secure-by-default development patterns, libraries, templates and model interaction patterns ("golden paths")
• Implement security and AI-specific checks in CI / CD workflows (e.g. GitHub Actions, Argo Workflows) and in runtime environments (e.g. Kubernetes admission controllers)
• Leverage AI / ML tools to automate code review, alert triage, log analysis, and threat detection for application-layer risks
• Develop and maintain security guardrails, input / output filters, and policy enforcement layers for LLM interactions
• Write and tune rules to catch insecure code patterns and prevent critical vulnerabilities from reaching production
• Conduct threat modeling and security design reviews for AI-related products, such as chatbots, model-connected platforms (MCPs), and autonomous agents
• Contribute to internal penetration tests against AI systems
• Collaborate with developers to remediate security issues by offering clear guidance and, where needed, hands-on support
• Contribute to internal tooling and frameworks to make secure development frictionless and fast

What We're Looking For :

Who We Are

The Company : Amplitude is filled with humble, life-long learners who are eager to help one another and the company succeed. Our values of growth mindset, ownership, and humility are core to the way we work : we're tenacious in the face of challenges, we take the initiative to solve problems that drive our shared success, and we operate from a place of empathy and openness, seeking to understand many points of view.

The Product : Amplitude is a digital analytics platform-we help companies capture data they can trust, uncover clear insights about customer behavior, and take faster action. This empowers teams to build better product experiences that drive business growth. We're super proud of what we've built and continue to expand : a platform that empowers companies to thrive in the digital era.

We care about the well-being of our team : We offer competitive pay and benefits packages that reflect our commitment to the health and well-being of our Ampliteers.

Some of our benefit programs include :

Other fun facts about Amplitude :

"This role is eligible for equity, benefits and other forms of compensation.

Based on Colorado law, the following details are for individuals who will work for Amplitude in Colorado. Colorado range : $138,000 - $207,000 total target cash (inclusive of bonus or commission)

Based on legislation in New York City, the following details are for individuals who will work for Amplitude in New York City. New York City salary range : $154,000 - $231,000 total target cash (inclusive of bonus or commission)

Based on legislation in California, the following details are for individuals who will work for Amplitude in San Francisco Bay Area of California. Salary range : $154,000 - $231,000 total target cash (inclusive of bonus or commission)

Based on legislation in California, the following details are for individuals who will work for Amplitude in California outside of the San Francisco Bay Area. California salary range : $138,000 - $207,000 total target cash (inclusive of bonus or commission)

Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington state. Washington salary range : $138,000 - $207,000 total target cash (inclusive of bonus or commission)

Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington only : unlimited PTO, 10 to 13 holidays annually (will vary), medical dental and vision PPO and CDHP plans. Finally, a company sponsored 401(k) retirement plan."

"Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records."

By applying for this job, you acknowledge that Amplitude processes your personal data in accordance with the Amplitude Applicant Privacy Notice.

Staying Safe - Protect Yourself From Recruitment Fraud

We are aware of individuals and entities fraudulently representing themselves as Amplitude recruiters and / or hiring managers. Amplitude will never ask for financial information or payment, or for personal information such as bank account number or social security number during the job application or interview process. Any emails from the Amplitude recruiting team will come from an @amplitude.com email address. You can learn more about how to protect yourself from these types of fraud by referring to this article. Please exercise caution and cease communications if something feels suspicious about your interactions.