AI Security Engineer San Francisco, CA

Amplitude is the leading AI analytics platform, helping over 4,300 customers—including Atlassian, Burger King, NBCUniversal, Square, and Under Armour—build better products and digital experiences. With powerful AI Agents embedded across our platform, teams can analyze, test, and optimize user experiences faster than ever. Ranked #1 across multiple categories by G2, Amplitude is the best-in-class solution for product, data, and marketing teams.

Learn more at

As an organization, we deliver for our customers by living our values. We operate from a place of humility, take ownership of problems and successes, approach challenges with a growth mindset, and put our customers at the center of everything we do.

Amplitude’s Commitment to Diversity Equity & Inclusion (DEI): Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions. We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.

We’re hiring an AI Security Engineer within IT Security to strengthen enterprise security controls for AI tools and AI-enabled workflows used across the company (e.g., access controls, permissions, data handling, vendor security reviews, and policy enforcement). This role is not a product/ML security engineering role; it’s focused on corporate/enterprise systems and how AI usage changes risk in those environments.

You’ll partner closely with IT, Security, Legal/Privacy, and Business Systems to ensure AI tools are used safely, compliantly, and with least privilege
, without slowing teams down.

As an AI Security Engineer, you will:

Enterprise Security + IT Security

• Support day-to-day enterprise security operations across corporate systems:
  SaaS security posture, identity security, access reviews, device trust alignment
  , vulnerability management and remediation, and security guardrails.
• Help maintain and improve controls for identity and access management (Okta/SSO, group access, roles, provisioning), including periodic access reviews and least-privilege enforcement.
• Participate in vendor/tool/AI tool onboarding reviews for enterprise apps, including basic risk evaluations and tracking remediation items.

AI Governance + AI Controls

• Help implement and operate AI access controls (who can use which AI tools/features, what data is allowed, and what permissions are required).
• Review and validate AI-related permissions
  , configurations, and data-sharing settings in enterprise environments (e.g., workspace settings, admin consoles, connectors/integrations).
• Support AI governance requirements
  : help document controls, maintain inventories of AI tools, and align configurations with internal policy and Legal/Privacy guidance.
• Assist with DLP and data handling controls related to AI (what can/can’t be shared, enforcement patterns, exceptions process).

Automation + Visibility

• Build or maintain lightweight scripts/workflows to support visibility and control (e.g., access review exports, policy checks, configuration drift checks, basic alerts).
• Help create dashboards/metrics for AI tool adoption and control posture (inventory completeness, access review completion, policy compliance).
• Participate in incident triage as needed for enterprise/AI tool issues (e.g., over-permissioned access, suspicious sharing, misconfigurations), with guidance from senior engineers.

You'll be a great addition to the team if you have:

• 2–4 years in IT Security, Enterprise Security, Corporate Security Engineering, or Security Operations with strong enterprise systems exposure.
• Hands‑on familiarity with SSO/IAM concepts (SAML/OIDC basics, SCIM provisioning fundamentals, group/role-based access).
• Comfortable doing access reviews
  : interpreting entitlements, spotting over‑permissioning, documenting decisions, and following up with stakeholders.
• Experience supporting security controls in enterprise tooling (Google Workspace / Microsoft, Okta, device management, SaaS admin consoles).
• Some scripting/automation experience (Python, Bash, or similar) OR strong…