Applied Scientist, AVM Builder Enablement
Core
Design and build scientific approaches using program analysis, machine learning, and generative AI to automatically detect, analyze, and fix vulnerabilities in AWS's software supply chain.
Role type
Senior Applied Scientist (Software Security & Program Analysis)
Builds
Automated vulnerability detection, reachability analysis, and code repair systems for AWS services
Domain
Cloud Security, Software Supply Chain, Program Analysis
Deliverable
production ML models
Required skills
PhD or equivalent research experience, 3+ years building models for business applications, experience in patents or top-tier publications, programming in Java/C++/Python, algorithms and data structures, parsing, numerical optimization, data mining, parallel and distributed computing, high-performance computing
Preferred skills
Unix/Linux experience, professional software development experience
Technologies
Java, C++, Python, Static analysis, Dynamic analysis, LLM-based agents, Generative AI
Responsibilities
Design scientific approaches for vulnerability detection and risk prioritization; Build program analysis techniques (static, dataflow, call-graph) to assess exploitability; Apply generative AI and agentic coding for automatic dependency upgrades and patching; Develop verification methods (test generation, behavior-equivalence) to ensure fix safety; Own end-to-end design and delivery of science problems; Collaborate with engineers to prototype and deploy production systems; Partner with security and OS teams to address remediation challenges; Stay current in software security research and contribute to publications; Mentor junior scientists and engineers.
Seniority
Senior, hands-on IC