Applied Scientist II, AWS Security

At Amazon, Security is a top priority. Are you interested in shaping the future of security for AWS, our customers, and the broader open source community? Do you want to be part of building something with massive impact? Our AWS Security Customer Outcomes Team is looking for a strong applied scientist as we help improve the security of open source software and the safety of the software supply chain generally.

We're looking for an ambitious team member who will bring added scientific rigor and innovation to how our customer's experience security with and through open source software. Our systems operate on a global scale across a diverse ecosystem of field teams, security requirements, and tooling which requires high velocity security innovation that scales.

We are seeking an Applied Scientist to help define, design, build, and operate AI-powered security solutions across the full lifecycle of open source software usage. You will work alongside a team to build intelligent automation that augments manual identification, analysis, and remediation workflows, enforces security controls for agents and human experts, and provides data-driven insights to AWS leadership.

• Architect and build AI-powered security applications and tooling — Design and implement LLM-based systems (leveraging Bedrock, Sage Maker, and state of the art patterns) for intelligent code scanning, automated solution development/deployment, and remediation alternatives.

• Transform manual processes – Reimagine and deliver change from low throughput, human-dependent processes into high volume, machine speed pipelines without sacrificing key quality metrics.

• Collaborate with and influence other leaders – The open source ecosystem has many stakeholders, and change requires listening and supporting but also influencing and leading through action.

• Drive proactive security automation — Build systems that identify and remediate security issues in deliverables (code, threat models, content) without requiring explicit builder consent at every step, moving from reactive reviews to proactive prevention

• Own operational excellence — Define and maintain SLAs, monitoring, alerting, runbooks, and incident response for services you own; participate in on-call rotation to support 24/7 availability

• Lead technical design — Produce design documents, conduct trade-off analysis, and drive alignment across organizations.

• Design and conduct scientific research using machine learning and deep learning techniques to address complex, ambiguous problems, working backwards from customer needs to invent new approaches or extend existing ones.

• Build, train, and evaluate production-quality models using frameworks such as PyTorch or Tensor Flow, applying rigorous experimentation, feature engineering, and hyperparameter optimization to improve accuracy and performance.

• Write clean, maintainable code with optimal data structures and algorithms, ensuring your components integrate directly into production systems and meet high standards for operational reliability and resource efficiency.

• Collaborate with engineering and product partners to translate scientific insights into scalable solutions, clearly communicating design decisions and trade-offs to ensure long-term maintainability.

• Contribute to the scientific community by authoring or co-authoring peer-reviewed publications, mentoring less experienced scientists, and participating in technical reviews across teams.

You might start your morning reviewing experiment results and refining a model architecture before syncing with engineering partners on an upcoming production integration. After lunch, you could dive into a research paper relevant to a challenge your team…