Sr. Applied Scientist, Cyber Threat Intelligence

We are seeking a Senior Applied Scientist to pioneer the application of artificial intelligence and machine learning to cyber threat intelligence at Amazon scale. In this role, you will invent and deploy novel AI/ML systems that automate threat detection, accelerate intelligence analysis, and enable proactive defense capabilities. You will work on ambiguous, scientifically-complex problems where traditional engineering approaches fall short—from building predictive models that score threat likelihood against Amazon's specific attack surface, to developing graph neural networks that cluster adversary infrastructure, to creating LLM-powered systems that multiply analyst productivity.

This position requires that the candidate selected be a US Citizen.

• Identify, frame, and solve scientifically-complex threat intelligence problems where no textbook solutions exist—including threat scoring, malware classification, infrastructure clustering, and intelligence automation
• Drive the scientific agenda for AI/ML within ACTI by proposing research initiatives, defining success metrics, and securing management buy-in
• Extend and invent machine learning techniques for cybersecurity applications, including anomaly detection on noisy data, few-shot learning for emerging threat families, and graph-based reasoning over attacker infrastructure
• Publish research at peer-reviewed venues (e.g., USENIX Security, IEEE S&P, ACM CCS, NeurIPS workshops)

• Design, build, and deploy production AI/ML systems that process threat data at scale—from model training on petabyte-scale security logs to real-time inference serving millions of predictions daily
• Partner with ACTI engineering teams to integrate AI/ML models into existing intelligence platforms
• Develop end-to-end solutions including data pipelines, feature engineering, model training, evaluation frameworks, and production monitoring
• Write production-quality code and deploy models with operational excellence—reliability, maintainability, and cost efficiency

• Influence across multiple ACTI sub-teams and partner organizations
• Build consensus on scientific approaches, balancing analytical rigor with operational urgency inherent to threat intelligence
• Mentor security engineers and analysts on AI/ML concepts, helping the broader ACTI team develop data literacy and scientific thinking
• Represent ACTI in Amazon’s internal science community and contribute to the broader information security research ecosystem

Amazon Cyber Threat Intelligence (ACTI) is responsible for identifying, curating, and reporting timely, accurate, and actionable threat intelligence to protect Amazon’s global businesses and customers. We investigate, analyze, and defend against sophisticated cyber threats across all Amazon business lines—AWS, retail, entertainment, logistics, and corporate infrastructure.

• PhD in engineering, technology, computer science, machine learning, robotics, operations research, statistics, mathematics or equivalent quantitative field
• 5+ years of relevant, broad research experience after PhD (or equivalent body of work demonstrating scientific innovation)
• Experience deploying AI/ML models into production systems with direct, verified customer impact
• Experience in one or more: NLP/LLMs, graph neural networks, anomaly detection, deep learning, or probabilistic modeling
• Software development skills
• Publication record (including NeurIPS, ICML, ICLR, ACL, EMNLP, KDD, USENIX Security, IEEE S&P, or equivalent)

• Experience applying AI/ML to cybersecurity problems
• Ability to independently frame ambiguous problems, define research agendas, and deliver results with limited guidance
• Familiarity with threat intelligence frameworks and security operations concepts
• Experience with large-scale graph analytics, knowledge graphs, or graph neural networks
• Experience building and deploying LLM/GenAI applications (RAG systems, fine-tuning, prompt engineering at scale)
• Familiarity with ML frameworks such as PyTorch, Tensor Flow, or JAX
• Proficiency with AWS services (Sage Maker, Bedrock, EMR, Glue, Lambda, S3)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

A