Interested in this Research Scientist role at Amazon.com?
Apply Now →Skills & Technologies
About This Role
DESCRIPTION
Applied Scientists on the AWS Vulnerability Management (AVM) Builder Enablement team use program analysis, machine learning and generative AI for managing vulnerabilities and securing the software supply chain across AWS. Our scope covers the third-party open-source packages, language ecosystems, operating systems and kernels that AWS services are built on. Our goal is to take builders out of the remediation loop. When a vulnerability is disclosed or a package is compromised, our systems work out whether it actually affects AWS, generate the fix, check that it's safe and ship it at AWS scale, with one click or no clicks at all.
New vulnerabilities are disclosed every day in the software AWS depends on, and finding and fixing them by hand doesn't scale. We build systems that detect vulnerabilities and work out whether the vulnerable code can actually be reached and exploited in a given service. They rank issues by real risk rather than raw severity scores, then fix them automatically. That can mean upgrading dependencies across ecosystems like Java, Python, JavaScript, Go and Rust, fixing breaking API changes, backporting patches, or patching operating systems and kernels across the fleet. Just as important, we check that each fix is correct and safe, so it can merge with little or no human review.
Beyond known vulnerabilities, we protect the integrity of the software supply chain itself. Modern software is assembled more than it is written, and every dependency is a potential way in for attackers. Securing it means knowing what's in our software, where it came from and whether it can be trusted. Our work here includes building and analyzing software bills of materials (SBOMs), verifying package provenance and build integrity, and detecting malicious or compromised packages before they reach production.
Our methods range from static and dynamic program analysis to LLM-based agents for code repair and upgrades. This is a chance to shape a fast-growing area that directly affects the security of AWS and its customers. You'll apply your technical depth in a fast-moving environment, and your work will reach thousands of AWS builders and services.
Key job responsibilities
- Design and build scientific approaches to vulnerability management. This includes vulnerability detection, reachability and exploitability analysis, dependency resolution, and prioritizing risk across third-party packages, operating systems and kernels.
- Build program analysis techniques (static analysis, dataflow and call-graph analysis, binary and source analysis) that tell us precisely whether a vulnerability affects a given service or host.
- Apply generative AI and agentic coding methods to fix vulnerabilities automatically. Examples include upgrading dependencies, fixing breaking API changes, backporting patches and migrating code across language versions.
- Develop ways to check that automated fixes are correct and safe, such as test generation, behavior-equivalence checking, build and runtime checks, and confidence scoring, so changes can merge with little or no human review.
- Own the design, experiments and delivery of well-defined science problems from start to finish. Turn ambiguous problems into measurable experiments and deliver solutions with measurable impact, such as faster time to fix, higher fix success rates and fewer false positives.
- Work with engineers to turn research prototypes into production systems that run reliably across AWS's codebases and fleet.
- Work with security, OS and kernel, and builder-tools partner teams to understand their remediation challenges and data. Find opportunities where science can make a difference.
- Stay current with research in software security, program analysis, and ML for code. Contribute to internal and external publications where appropriate.
- Share your knowledge through design reviews, documentation and mentoring of junior scientists and engineers.
About the team
The AWS Vulnerability Management (AVM) Builder Enablement team protects AWS from security risks in the software it depends on. Our mission is to take builders out of the remediation loop. We find the issues that matter, fix them automatically and ship the fixes safely at AWS scale. Scientists and engineers on the team work side by side, turning research in program analysis and generative AI into production systems that reach thousands of AWS builders.
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.BASIC QUALIFICATIONS
- PhD or equivalent research experience
- 3+ years of building models for business application experience
- Experience in patents or publications at top-tier peer-reviewed conferences or journals
- Experience programming in Java, C++, Python or related language
- Experience in any of the following areas: algorithms and data structures, parsing, numerical optimization, data mining, parallel and distributed computing, high-performance computing
PREFERRED QUALIFICATIONS
- Experience using Unix/Linux
- Experience in professional software development
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, TX, Austin - 142,800.00 - 193,200.00 USD annually
USA, VA, Arlington - 142,800.00 - 193,200.00 USD annually
Salary Context
This $142K-$193K range is below the median for Research Scientist roles in our dataset (median: $199K across 63 roles with salary data).
Role Details
About This Role
Research Scientists push the boundaries of what AI can do. They design experiments, develop novel architectures, publish papers, and translate research breakthroughs into production capabilities. This is where the fundamental advances happen, from attention mechanisms to diffusion models to reasoning chains.
The work is intellectually demanding and often ambiguous. You might spend months on an approach that doesn't pan out. The best research scientists combine deep mathematical intuition with engineering pragmatism. They know when to go deep on theory and when to run experiments. They read papers voraciously and can spot incremental contributions from genuine breakthroughs.
Across the 9,079 AI roles we're tracking, Research Scientist positions make up 2% of the market. At Amazon.com, this role fits into their broader AI and engineering organization.
Research Scientist roles are concentrated at major AI labs (OpenAI, Anthropic, Google DeepMind, Meta FAIR) and well-funded AI startups. The competition is intense. PhD is effectively required for most positions, and publication track record matters. Compensation is among the highest in AI, reflecting both the scarcity of talent and the strategic importance of research breakthroughs.
What the Work Looks Like
A typical week includes: reading and discussing recent papers with your team, designing and running experiments on multi-GPU clusters, analyzing results and iterating on hypotheses, writing up findings for internal review or publication, and collaborating with engineering teams to productionize promising results. The ratio of thinking to coding is higher than in engineering roles.
Research Scientist roles are concentrated at major AI labs (OpenAI, Anthropic, Google DeepMind, Meta FAIR) and well-funded AI startups. The competition is intense. PhD is effectively required for most positions, and publication track record matters. Compensation is among the highest in AI, reflecting both the scarcity of talent and the strategic importance of research breakthroughs.
Skills Required
PhD strongly preferred for most roles. Deep expertise in a specific area (NLP, computer vision, reinforcement learning, multimodal) is expected. PyTorch is the standard. Publication track record matters. Strong mathematical foundations in linear algebra, probability, optimization, and information theory are assumed.
Beyond the fundamentals, companies value experience with large-scale distributed training, novel architecture design, and the ability to bridge theory and practice. Understanding of current frontier topics (reasoning, multimodal, long-context, alignment) is essential. Code quality matters more than many researchers expect. Labs want researchers who can implement their ideas cleanly.
Strong research postings specify the research area, mention the team you'd join, and describe the problems they're working on. They often list recent publications from the team. Vague 'AI research' postings without specifics usually mean the company wants to sound impressive but doesn't have a real research agenda.
Compensation Benchmarks
Research Scientist roles pay a median of $222,200 based on 749 positions with disclosed compensation. Mid-level AI roles across all categories have a median of $193,200. This role's midpoint ($168K) sits 24% below the category median. Disclosed range: $142K to $193K.
Across all AI roles, the market median is $213,000. Top-quartile compensation starts at $263,911. The 90th percentile reaches $318,400. For comparison, the highest-paying categories include AI Safety ($256,000) and Research Engineer ($252,000). By seniority level: Entry: $111,000; Mid: $193,200; Senior: $229,300; Director: $272,300; VP: $235,830.
Amazon.com AI Hiring
Amazon.com has 53 open AI roles right now. They're hiring across AI/ML Engineer, Research Scientist, AI Product Manager, AI Safety. Positions span Culver City, CA, US, Arlington, VA, US, New York, NY, US. Compensation range: $160K - $297K.
Location Context
AI roles in Austin pay a median of $209,100 across 306 tracked positions.
Career Path
Common paths into Research Scientist roles include PhD Student, Research Engineer, Postdoc.
From here, career progression typically leads toward Research Lead, Distinguished Scientist, VP of Research.
The PhD is the entry point for most paths. Choose your advisor and research area carefully since they'll define your first industry position. Publish consistently, contribute to open-source projects in your area, and build relationships at conferences. Industry research offers better compensation and compute resources than academia, but the pressure to show product impact is real.
What to Expect in Interviews
Research interviews are multi-stage: a research talk (present your best paper), technical deep-dives on your methodology, and often a 'research proposal' exercise where you design an experiment to test a hypothesis. Coding rounds test implementation ability alongside theoretical knowledge. Be prepared to implement a paper from scratch and discuss the design choices the authors made. Strong candidates can critique papers constructively and identify gaps in experimental methodology.
When evaluating opportunities: Strong research postings specify the research area, mention the team you'd join, and describe the problems they're working on. They often list recent publications from the team. Vague 'AI research' postings without specifics usually mean the company wants to sound impressive but doesn't have a real research agenda.
AI Hiring Overview
The AI job market has 9,079 open positions tracked in our dataset. By seniority: 106 entry-level, 4,384 mid-level, 3,343 senior, and 1,246 leadership roles (Director, VP, C-Level). Remote roles make up 6% of the market (531 positions). The remaining 8,478 roles require on-site or hybrid attendance.
The market median for AI roles is $213,000. Top-quartile compensation starts at $263,911. The 90th percentile reaches $318,400. Highest-paying categories: AI Safety ($256,000 median, 66 roles); Research Engineer ($252,000 median, 457 roles); AI Engineering Manager ($251,622 median, 55 roles).
Research Scientist roles are concentrated at major AI labs (OpenAI, Anthropic, Google DeepMind, Meta FAIR) and well-funded AI startups. The competition is intense. PhD is effectively required for most positions, and publication track record matters. Compensation is among the highest in AI, reflecting both the scarcity of talent and the strategic importance of research breakthroughs.
The AI Job Market Today
The AI job market spans 9,079 open positions across 16 role categories. The largest categories by volume: AI/ML Engineer (6,862), AI Product Manager (453), AI Software Engineer (451). These three account for the majority of open positions, though smaller categories often have higher per-role compensation because of specialized skill requirements.
The seniority mix tells a story about where AI teams are in their maturity. Entry-level roles (106) are outnumbered by mid-level (4,384) and senior (3,343) positions, reflecting that most companies are past the 'build a team from scratch' phase and need experienced engineers who can ship production systems. Leadership roles (Director, VP, C-Level) total 1,246 positions, representing the bottleneck between technical execution and organizational strategy.
Remote work availability sits at 6% of all AI roles (531 positions), with 8,478 requiring on-site or hybrid attendance. The remote share has stabilized after the post-pandemic correction. Senior and specialized roles (Research Scientist, ML Architect) are more likely to be remote-eligible than entry-level positions, partly because experienced hires have more negotiating power and partly because these roles require less hands-on mentorship.
AI compensation is structured in clear tiers. The market median sits at $213,000. Top-quartile roles start at $263,911, and the 90th percentile reaches $318,400. These figures include base salary with disclosed compensation. Total compensation (including equity, bonuses, and sign-on) runs 20-40% higher at companies that offer those components.
Category matters for compensation. AI Safety roles lead at $256,000 median, while Prompt Engineer roles sit at $141,440. The spread between highest and lowest-paying categories reflects the premium on specialized technical skills versus broader analytical roles.
The most in-demand skills across all AI postings: Python (1,649 postings), Aws (898 postings), Azure (723 postings), Rag (671 postings), Gcp (536 postings), Pytorch (434 postings), Claude (410 postings), Kubernetes (406 postings). Python dominates, appearing in the vast majority of role descriptions regardless of category. Cloud platform experience (AWS, GCP, Azure) is the second most common requirement. The newer entrants to the top skills list (RAG, vector databases, LLM APIs) reflect the shift from traditional ML toward generative AI applications.
Frequently Asked Questions
Get Weekly AI Career Intelligence
Salary data, skills demand, and market signals from 16,000+ AI job postings. Every Monday.