Senior DevOps Engineer (Security Focus)

Amplitude; San Francisco (CA); Hybrid; USD 161,000 - 266,000; Full time

Job summary

Join a forward-thinking company as a Senior DevSecOps Engineer, where you'll lead security initiatives across infrastructure and product engineering. This role offers the opportunity to collaborate with engineering teams on cloud security, container security, and developer tooling. You'll drive improvements in security posture while ensuring development velocity, creating automated guardrails, and proactively identifying risks. If you thrive in fast-paced environments and are passionate about security, this is the perfect opportunity to make a significant impact in a dynamic organization that values growth, ownership, and innovation.

Benefits

100% employer-paid medical, dental, and vision insurance

Flexible time off and paid holidays

Generous stipends for wellness and learning

12-20 weeks of Paid Parental Leave

Mental health and wellness benefits

Employee Stock Purchase Program (ESPP)

Qualifications

• 4+ years in security engineering with a focus on DevSecOps.
• Hands-on expertise with AWS and Kubernetes security.
• Experience with CI/CD and integrating security controls.

Responsibilities

• Harden AWS and Kubernetes environments through automation.
• Drive secure development practices in CI/CD pipelines.
• Participate in on-call rotation for security incidents.

Skills

DevSecOps

AWS Security

Infrastructure as Code

Python

Bash

CI/CD

Kubernetes

Security Automation

Education

Bachelor's Degree in Computer Science or related field

Tools

Terraform

CloudFormation

Kubernetes Ecosystem Tools

Job description

About the Role:

As a Senior DevSecOps Engineer, you’ll lead security initiatives across infrastructure and product engineering, bringing a DevSecOps mindset to building automation and secure, scalable systems. You’ll collaborate closely with engineering teams and work across a wide range of domains including cloud security, container security, application security, and developer tooling. This is a role for someone who enjoys context-switching across a range of initiatives and isn't afraid to get into the weeds to unblock teams or ship secure solutions quickly. You’ll also participate in a shared on-call rotation to respond to high-risk security issues and incidents in order to help the business minimize exposure.

Success in this role means driving meaningful improvements in our security posture without slowing down development. You’ll reduce time-to-remediate, build automated guardrails, and proactively identify risks before they become incidents. You'll be a trusted partner to engineering, delivering high-velocity solutions that balance security and developer experience.

Key Responsibilities:

• Harden AWS and Kubernetes environments through automation, policy-as-code, and guardrails.
• Own and evolve our DevSecOps strategy across infrastructure and application pipelines.
• Drive end-to-end secure development practices: integrate security into CI/CD, build pre-commit hooks, and improve developer productivity without sacrificing security.
• Create and implement lightweight, scalable security controls that support fast-moving teams.
• Partner with engineering to identify and mitigate risks in architecture, design, and implementation stages.
• Participate in an on-call rotation to resolve critical/high-risk security issues as well as respond to security incidents with urgency and clarity.
• Identify opportunities to fix systemic gaps, reduce recurring pain points, and avoid reactive “whack-a-mole” cycles.

What We’re Looking For:

• 4+ years of experience in security engineering with a strong focus on DevSecOps and secure cloud infrastructure on AWS.
• Hands-on expertise with infrastructure-as-code tools (Terraform, CloudFormation) for AWS, as well as the Kubernetes ecosystem of tools.
• Strong coding/scripting skills in Python, Bash, or equivalent languages for automating security tasks.
• Experience with CI/CD platforms and integrating security controls early in the pipeline.
• Comfortable navigating ambiguity, driving clarity, and leading through execution in fast-paced environments.
• Willingness to go above and beyond, including submitting fixes and supporting teams directly when needed.
• Experience using AI to automate security tasks is a significant plus (e.g. log analysis, code review, alert triage).
• Familiarity with application security concepts is preferred, but not required.

Who We Are

The Company: Amplitude is filled with humble, life-long learners who are eager to help one another and the company succeed. Our values of growth mindset, ownership, and humility are core to the way we work: we’re tenacious in the face of challenges, we take the initiative to solve problems that drive our shared success, and we operate from a place of empathy and openness, seeking to understand many points of view.

The Product: Amplitude is a digital analytics platform—we help companies capture data they can trust, uncover clear insights about customer behavior, and take faster action. This empowers teams to build better product experiences that drive business growth. We’re super proud of what we’ve built and continue to expand: a platform that empowers companies to thrive in the digital era.

We care about the well-being of our team: We offer competitive pay and benefits packages that reflect our commitment to the health and well-being of our Ampliteers.

Some of our benefit programs include:

• Excellent medical, dental and vision insurance coverages, with 100% employer-paid premiums for employee medical, dental, vision on select plans
• Flexible time off, paid holidays, and more
• Generous stipends to spend on what matters most to you, whether that’s wellness (monthly), commuter transit/parking (monthly), learning and development (quarterly), home office equipment (annual), and much more
• Excellent Parental benefits including: 12-20 weeks of Paid Parental Leave, Carrot Fertility Benefits/Adoption/Surrogacy support, Back-up Child Care support
• Mental health and wellness benefits including no cost employee access to Modern Health coaching & therapy Sessions and high quality physician office experience via One Medical membership (select U.S. locations only)
• Employee Stock Purchase Program (ESPP)

Other fun facts about Amplitude:

• We were recognized in the Newsweek Excellence Index 2024.
• Our customers love us! They've said we're the #1 product analytics solution for 15 quarters in a row on G2.
• We're focused on growth. Check us out in Deloitte’s 2023 Technology Fast 500
• We care A LOT about product innovation. Fast Company called us the #3 most innovative enterprise company in the world.
• We invest in our people. We offer mentorship programs, management training, and wellness initiatives.
• We give back to our communities. We give every Ampliteer a charitable giving grant and paid volunteer time off.
• We were founded in 2012, went public via a direct listing in September 2021, and are now trading under the ticker $AMPL.
• We’re a global and fast-growing team! We have employees around the world and offices in San Francisco (HQ), New York, Vancouver, Amsterdam, London, Paris, Singapore, and Tokyo.
• Our mascot is the datamonster, who loves to chow down on numbers, charts, and graphs. Nom nom.

Amplitude provides equal employment opportunities (EEO). All applicants are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, or sexual orientation.

This role is eligible for equity, benefits and other forms of compensation.

Based on legislation in California, the following details are for individuals who will work for Amplitude in San Francisco Bay Area of California. Salary range: $161,000 - $266,000 total target cash (inclusive of bonus or commission) plus equity.

#LI-JJ1

#LI-Hybrid

By applying for this job, you acknowledge that Amplitude processes your personal data in accordance with the Amplitude Applicant Privacy Notice.

Staying Safe - Protect Yourself From Recruitment FraudWe are aware of individuals and entities fraudulently representing themselves as Amplitude recruiters and/or hiring managers. Amplitude will never ask for financial information or payment, or for personal information such as bank account number or social security number during the job application or interview process. Any emails from the Amplitude recruiting team will come from an @amplitude.com email address. You can learn more about how to protect yourself from these types of fraud by referring to this article. Please exercise caution and cease communications if something feels suspicious about your interactions.

Amplitude is a leading digital analytics platform that helps companies unlock the power of their products. More than 3,500 customers, including Atlassian, Jersey Mike’s, NBCUniversal, Shopify, and Under Armour, rely on Amplitude to gain self-service visibility into the entire customer journey. Amplitude guides companies every step of the way as they capture data they can trust, uncover clear insights about customer behavior, and take faster action. When teams understand how people are using their products, they can deliver better product experiences that drive growth.

As an organization, we approach challenges with humility, take ownership of our contributions, and embrace a growth mindset that pushes us to constantly improve ourselves, each other, and the value we bring to customers and partners.

Amplitude’s Commitment to Diversity Equity & Inclusion (DEI): Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions. We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.