Applied Scientist: AI-Driven Vulnerability & SBOM Automation

Amazon Inc.; Austin (TX); On-site; USD 143,000 - 193,000; Full time

Job summary

Amazon Security in Austin, TX is seeking Applied Scientists to advance vulnerability management for the AVM Builder Enablement team. You will apply program analysis, ML and generative AI to manage vulnerabilities and secure the software supply chain across AWS, across Java, Python, Go and Rust ecosystems.

You'll design detection and analysis techniques, build baselines for risk prioritization, and push fixes through automated pipelines at AWS scale, with mentoring of junior scientists and

Qualifications

• PhD or equivalent research experience.
• Experience programming in Java, C++, Python or related language.
• Experience in algorithms and data structures, parsing, numerical optimization, data mining, parallel and distributed computing, high-performance computing.
• Experience in patents or publications at top-tier peer-reviewed conferences or journals.

Responsibilities

• Design and build scientific approaches to vulnerability management, including detection, reachability and exploitability analysis, dependency resolution and risk prioritization.
• Build program analysis techniques (static/dynamic analysis, dataflow and call-graph analysis) to determine if a vulnerability affects a service or host.
• Apply generative AI and agentic coding methods to fix vulnerabilities automatically, including upgrading dependencies and backporting patches.
• Develop ways to check that automated fixes are correct and safe with tests, checks and confidence scoring.
• Own design, experiments and delivery of well-defined science problems from start to finish with measurable impact.
• Work with engineers to turn research prototypes into production systems across AWS codebases and fleet.
• Collaborate with security, OS/kernel and builder-tools teams to address remediation challenges.
• Stay current with research in software security, program analysis and ML for code; contribute to publications when appropriate.
• Share knowledge through design reviews, documentation and mentoring of junior scientists and engineers.

Skills

Java

C++

Python

Education

PhD or equivalent research experience

Job description

Amazon Security in Austin, TX is seeking Applied Scientists to advance vulnerability management for the AVM Builder Enablement team. You will apply program analysis, ML and generative AI to manage vulnerabilities and secure the software supply chain across AWS, across Java, Python, Go and Rust ecosystems.

You'll design detection and analysis techniques, build baselines for risk prioritization, and push fixes through automated pipelines at AWS scale, with mentoring of junior scientists and