Sr. Applied Scientist, Amazon Cyber Threat Intelligence

We are seeking a Senior Applied Scientist to pioneer the application of artificial intelligence and machine learning to cyber threat intelligence at Amazon scale. In this role, you will invent and deploy novel AI/ML systems that automate threat detection, accelerate intelligence analysis, and enable proactive defense capabilities. You will work on ambiguous, scientifically-complex problems where traditional engineering approaches fall short-from building predictive models that score threat likelihood against Amazon"s specific attack surface, to developing graph neural networks that cluster adversary infrastructure, to creating LLM-powered systems that multiply analyst productivity.

This is a unique opportunity to bring scientific rigor to one of the most consequential problem domains in technology-protecting hundreds of millions of customers and the infrastructure that powers the global economy. You will be the first Applied Scientist embedded within ACTI, establishing the science agenda and building the foundation for AI-driven threat intelligence at Amazon.

This position requires that the candidate selected be a US Citizen.

Key job responsibilities

Invent

• Identify, frame, and solve scientifically-complex threat intelligence problems where no textbook solutions exist-including threat scoring, malware classification, infrastructure clustering, and intelligence automation
• Drive the scientific agenda for AI/ML within ACTI by proposing research initiatives, defining success metrics, and securing management buy-in
• Extend and invent machine learning techniques for cybersecurity applications, including anomaly detection on noisy data, few-shot learning for emerging threat families, and graph-based reasoning over attacker infrastructure
• Publish research at peer-reviewed venues (e.g., USENIX Security, IEEE S&P, ACM CCS, NeurIPS workshops)

Implement

• Design, build, and deploy production AI/ML systems that process threat data at scale-from model training on petabyte-scale security logs to real-time inference serving millions of predictions daily
• Partner with ACTI engineering teams to integrate AI/ML models into existing intelligence platforms
• Develop end-to-end solutions including data pipelines, feature engineering, model training, evaluation frameworks, and production monitoring
• Write production-quality code and deploy models with operational excellence-reliability, maintainability, and cost efficiency

Influence

• Influence across multiple ACTI sub-teams and partner organizations
• Build consensus on scientific approaches, balancing analytical rigor with operational urgency inherent to threat intelligence
• Mentor security engineers and analysts on AI/ML concepts, helping the broader ACTI team develop data literacy and scientific thinking
• Represent ACTI in Amazon"s internal science community and contribute to the broader information security research ecosystem

About the team

Amazon Cyber Threat Intelligence (ACTI) is responsible for identifying, curating, and reporting timely, accurate, and actionable threat intelligence to protect Amazon"s global businesses and customers. We investigate, analyze, and defend against sophisticated cyber threats across all Amazon business lines-AWS, retail, entertainment, logistics, and corporate infrastructure. Our intelligence products serve Amazon and AWS leadership, service teams, partners, and both internal and external customers.

ACTI operates within Amazon"s broader security organization led by the Chief Security Officer. We deliver intelligence that enables proactive defense, informs security investment decisions, and supports incident response across the world"s largest cloud infrastructure.

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.