International Association
for Cryptologic Research

We are looking for a seasoned cryptography engineer for a development role in the Technology group. This role focuses on the implementation of cutting-edge cryptographic protocols for use at web scale in CloudFlare’s systems.

Candidates will have extensive experience in implementing real-world cryptographic protocols such as TLS. Substantial contributions to cryptographic software such as OpenSSL are preferred. Experience in Go, C, and assembly are required. Cryptography Engineers are expected to be familiar with the nuances of implementing public-key cryptography (PKI), side-channel attacks, padding oracles, constant-time implementations, and have deep domain knowledge.

Requirements

• B.S. or M.S. Computer Science or related field, or equivalent experience
• Experience building security in a fast-paced, web-scale environment
• Advance knowledge of networking protocols - TCP/IP, DNS, SMTP, BGP etc.
• In-depth knowledge of authentication protocols, applied cryptography, PKI and SSL/TLS
• Proficiency in these languages - Go, C, and x86/amd64 assembly
• Knowledge of the latest attack trends, tools and the threat landscape
• Proven track record of independently driving security projects in a fast-paced environment
• Excellent communication skills on both technical and non-technical issues

Bonus Points:

• Substantial contributions to cryptography software such as OpenSSL
• Experience with high throughput/low latency real-time systems and/or content delivery networks

Closing date for applications: 15 June 2016

Contact: https://careers.jobscore.com/careers/cloudflare/jobs/cryptography-engineer-c0wW9i590r5BqSeMg-44q7

More information: https://careers.jobscore.com/careers/cloudflare/jobs/cryptography-engineer-c0wW9i590r5BqSeMg-44q7

Job description: The research group Cryptography and IT Security (headed by Profs. Jörn Müller-Quade and Dennis Hofheinz) of the Institute of Theoretical Informatics at KIT has an opening for a PhD position in the scope of the project "CyPhyCrypt: Advanced Crypto for New and Next-Generation Cyber-Physical Systems" (PIs: Andy Rupp @ KIT and Christof Paar @ RUB). This project is fully funded by the German Research Foundation (DFG). It deals with the development of novel CPS security mechanisms with provable security guarantees and computational requirements that can be met in practical settings, based on sound advanced cryptographic constructions (e-cash, anonymous reputation systems, optimistic fair-exchange, etc.). The PhD candidate will be working on security models for the considered CPS as well as on cryptographic constructions which can be shown secure in these models.

Qualification:

• Very good university degree (Master or equivalent) in Computer Science or Mathematics.
• Solid background in provable security, e.g., demonstrated by excellent grades in corresponding postgraduate courses or by publications.
• Self-motivation, team spirit, and willingness to work in interdisciplinary projects.

Application: Please send your application (CV, transcripts and certificates, names of references) by e-Mail to: andy.rupp (at) kit.edu

KIT is an equal opportunity employer. Women are especially encouraged to apply. Applicants with disabilities will be preferentially considered if equally qualified.

Closing date for applications: 15 April 2016

Contact: Andy Rupp, Karlsruhe Institute of Technology, Institute of Theoretical Informatics, email: andy.rupp (at) kit.edu, phone: +49 721/608-41862.

More information: https://www.pse.kit.edu/downloads/stellenangebote/PhD_Student-ITI-CyPhyCrypt_V2-16-04-15.pdf

In electronic devices there is a trend to implement ever more functionality in software instead of hardware. Software has the advantage of being less costly, more scalable, easier to personalize, and easier to update. This trend exists also for security-sensitive functionality. For instance, payment schemes are increasingly implemented in software running on the host CPU of a mobile phone instead of in secured hardware.

A critical question now becomes how to hide secret data and algorithms in software that is running on a fully open platform. The challenge here is that an attacker should be assumed to have full access to and full control over the execution environment. This question is particular relevant for cryptographic keys. For hardware implementations, the protection of keys is a well-studied topic, and evaluation labs are well able to judge the security level of an implementation. For software, however, the evaluation of such solutions, called white-box implementations, is still in its infancy and evaluation labs are not yet able to rate their security level.

This project aims to improve our knowledge of white-box cryptography and white-box attacks to the point where certification of software security becomes meaningful.

We are looking for a candidate who meets the following requirements:

• Master degree in Computer Science, Mathematics, or another closely related discipline;
• an interest in computer security and cryptography
• knowledge of side-channel attacks on protected hardware (e.g. DPA, Fault injection) is a plus
• ability to work in a team, cooperate with industrial partners
• fluent in spoken and written English

Closing date for applications: 17 April 2016

Contact: prof.dr.ir. W.P.A.J. Michiels , email: w.p.a.j.michiels (at) tue.nl

More information: http://jobs.tue.nl/nl/vacature/phd-student-for-the-cowbois-project-256116.html

Ph.D. positions in information security (M/F)
Ref: R-STR-5014-00B
Fixed Term Contract 3 year (CDD) full-time (40 hrs/week)
Probation: 6 months
Number of positions: 2

Your Role: The successful candidate will participate in the activities of the APSIA research group (http://apsia.uni.lu/) led by Prof. P. Y. A. Ryan. The group specializes in the mathematical foundations of information assurance.

Research Context: The positions are within a national partnership project about the design and the analysis of security of communication protocols for the encrypted exchange and storage of information. Such activities are meant to make it possible to assess rigorously the security of the protocols developed as components of a \'Privacy by Default\' product, and to instil security in the engineering processes from the design of the communication logic down to the implementation of the running code obtained by automatic translation. The analysis can be extended to ensure security to upper layers, including those interacting with the users.

Duties: Under the direction of a senior scientist research and a professor, the candidates will carry research, write scientific papers, present research results at conferences, collaborate with research partners, and write and defend a Ph.D. thesis.

Closing date for applications: 31 March 2016

Contact: Gabriele Lenzini, Peter Y A Ryan

More information: http://emea3.mrted.ly/z3hn

The Modular Approach to Cloud Security (MACS) is an NSF Frontier project that is building information systems with meaningful multi-layered security guarantees. It is a multi-institution research project with 13 PIs at four universities: Boston University, MIT, Northeastern, and the University of Connecticut.

The MACS team are looking for excellent postdoctoral fellows in the following areas:

• Cryptography: theoretical and applied
• Database security
• Hardware security
• High performance computing
• Network security
• Security modeling and analysis
• Virtualization and operating system security

Preference will be given to candidates with expertise and interest in multiple areas. Fellows will work closely with multiple PIs on the MACS team and will be affiliated with all four host universities.

Candidates should send their CV, research statement, and list of references to macs-postdoc (at) cs.bu.edu

Closing date for applications: 30 June 2016

Contact: Mayank Varia, MACS director, macs-postdoc (at) cs.bu.edu

More information: http://www.bu.edu/macs

Potential candidates are required to have interests in public-key encryption and its applications to big data environments, like data privacy, performance on encrypted data and so on.

This position is fully supported by The Chinese University Program, which is one of the Chinese Government Scholarship programs. It is a full scholarship to support Chinese universities to enroll outstanding international students for graduate studies in China.

Qualification:

• Very good Master degree in Computer Science or Mathematics.
• Solid background in provable security, e.g., demonstrated by publications.

Closing date for applications: 20 March 2016

Contact: Please send your questions or application (CV, transcripts and certificates, names of references) by e-Mail to: xuerui(at)iie.ac.cn

Applications are invited for the post of Lecturer in the Information Security Group at Royal Holloway, University of London

Applications are invited from researchers whose interests are related to, or complement, current strengths of the ISG. We are particularly interested in applicants who will be able to help drive forward research related to Internet of Things (IoT) security.

Applicants should have a Ph.D. in a relevant subject or equivalent, be a self-motivated researcher, and have a strong publication record. Applicants should be able to demonstrate an enthusiasm for teaching and communicating with diverse audiences, as well as show an awareness of contemporary issues relating to cyber security.

This is a full time and permanent post, with an intended start date of 1st September, 2016, although an earlier or slightly later start may be possible. This post is based in Egham, Surrey, where the College is situated in a beautiful, leafy campus near to Windsor Great Park and within commuting distance from London.

Closing date for applications: 1 April 2016

Contact: Professor Keith Mayes
Director of the Information Security Group
[contact and further details via the supplied URL]

More information: https://jobs.royalholloway.ac.uk/vacancy.aspx?ref=0216-068

There is a vacancy for a postdoctoral fellow position at the Department of Informatics, Selmer Center for secure and reliable communications. The position is for a period of 4 years and is connected to the project Modern Methods and Tools for Theoretical and Applied Cryptology (CryptoWorld) funded by the Norwegian Research Council. For more information and to apply for the position see https://www.jobbnorge.no/en/available-jobs/job/122732/postdoctoral-fellow-within-cryptology

Closing date for applications: 31 March 2016

Contact: Professor Tor Helleseth, phone (+47) 55584160, email: Tor.Helleseth (at) uib.no

More information: https://www.jobbnorge.no/en/available-jobs/job/122732/postdoctoral-fellow-within-cryptology

Reporting to the Director of Security and Data Sciences, the Engineer is responsible for the following:

• Conduct research on advanced ethical hacking, penetration testing, reverse engineering.
• Conduct assessment on network infrastructure, web and mobile security.
• Assisting in IT security enforcement and enhancement.
• Design secure application testing approaches, integrate quality assurance testings with security functionalities.
• Candidate with strong programming background will also be involved in security tool/signature development.
• Design and implement preventive security controls, application code review and analysis, code scanning and testing tools, web application scanning and penetration tests.
• Manage vendor and service provider on security tools and technologies project engagement and delivery.

Requirements

• Bachelor’s degree or above in Computer Science, Electrical Engineering or other relevant disciplines with a minimum of 5 years of experience in security assessment. Candidates with less experience will also be considered for the Engineer level.
• Experience in financial industry is preferred but not mandatory.
• Demonstrate wide working knowledge of application security.
• Experience in application development life cycle, application testing and code scanning, with exposure in penetration test, finding exploits, vulnerabilities, unauthorized access, or other malicious activities in computer systems.
• Proficient in English, spoken and written.
• High integrity and professional work practice.
• Appreciation of people and cultures of different countries.

Closing date for applications: 15 March 2016

Contact: charlenechoo (at) astri.org

More information: http://www.astri.org/careers/work-at-astri/jobs/senior-engineerengineer-cyber-security-assessment-multiple-openings-4

A postdoc position is opened by The Université Libre de Bruxelles and the company Hipperos in the domain of Secured Real-Time Operating System. The aim of the research is to propose measures to introduce security in the architecture of a modern Real-Time Operating System (RTOS) in the sense of allowing Multiple Levels of Security. This means both the security of the RTOS itself related to the authentication of the kernel, updates, drivers, services, ... as well as the secure management of applications (registration of a new application, update and upgrade of applications and execution of applications) and the security of data inside applications. The researcher would study the HIPPEROS (http://hipperos.com) architecture and propose, based on the state-of-the-art of secure operating systems, how to smoothly integrate such an architecture in the existing development process of HIPPEROS. The researcher will implement the proposed architecture in the operating system.

Status: Two years Marie Curie postdoc grant

Expected starting date: September 2016

Location: University of Brussels (ULB), Belgium

Interested applicants should:

• Hold a Ph.D. degree or equivalent in Computer Science or Computer Engineering or a closely related area
• Have solid background on real-time systems
• Have good programming skills (in C)
• Have a good publication record
• Demonstrate an excellent level of spoken and written English. Knowledge of French is a plus.

Closing date for applications: 15 March 2016

Contact: Applications should be sent latest by March 15, 2016 to joel.goossens (at) ulb.ac.be

The Cryptography Research Team at Indian Institute of Technology Kharagpur (iitkgp.ac.in) invites strong PostDoc applications from highly motivated candidates working in the field of Cryptography. The candidate should be a PhD holder in Cryptography and/or related areas from a reputed institute. The candidate will be working in the Secured Embedded Architecture Laboratory http://cse.iitkgp.ac.in/resgrp/seal with a group of PhD students and faculty focused in the area of secured system design. The research will be aimed at developing efficient cryptographic protocols with applications in emerging fields such as Cloud computing and Internet of Things (IoT). Knowledge in public key, pairings, functional encryption, multi-party computation, and post-quantum cryptography topics is desirable. The candidate should have excellent publication track record in IACR conferences/workshops, as well as top journals (such as IEEE/ACM Transactions or IACR journals).

The candidate will be expected to collaborate with and lead a team of excellent and highly motivated PhD candidates for implementation of the protocols. The protocols designed would be tested wrt. side channels by a separate team of research associates. The candidate is expected to work in conjunction with them and also disseminate the necessary knowledge among the group via suitable course material, tutorials and regular group talks. Good communication skills are hence desirable.

The post-doc position will be partially funded under Information Security Education and Awareness Project, Ministry of Communication and Information Technology, Government of India. The candidate will be provided with a competitive salary (tax-free), along with highly subsidized housing, subsidized food in cafeteria, free healthcare at IIT hospital, travel support for international conferences, comprehensive funding for papers at top conferences like Crypto, performance based top up grants, and other perks and amenities.

Closing date for applications: 1 May 2016

Contact: Prof Debdeep Mukhopadhyay, Indian Institute of Technology, debdeep.mukhopadhyay (at) gmail.com, debdeep (at) cse.iitkgp.ernet.in

More information: http://cse.iitkgp.ac.in/resgrp/seal

I am seeking a postdoctoral researcher to work in the cryptography group at U Michigan from Fall 2016, preferably in lattice-based cryptography or related topics.

Closing date for applications: 31 May 2016

Contact: Chris Peikert, cpeikert (at) umich.edu

Potential candidates are required to have interests in main research directions of the Department of Informatics where the position is offered. We especially encourage those with primary interests in Boolean functions and their applications, and, more generally, in discrete mathematics and mathematical cryptography. Further information in the following link:

https://www.jobbnorge.no/en/available-jobs/job/122667/research-fellows-phd-candidates-in-informatics-computer-science-2-positions

Closing date for applications: 1 April 2016

Contact: Dr. habil. Lilya Budaghyan, email: lilya.budaghyan (at) uib.no

More information: https://www.jobbnorge.no/en/available-jobs/job/122667/research-fellows-phd-candidates-in-informatics-computer-science-2-

We are looking for a research scientist or post-doc in cryptography to work on novel cryptographic concepts for emerging ICT domains (e.g. cloud computing or cyber physical systems). Ideally you have experience in fields like modern public-key cryptography, distributed cryptography, privacy enhancing technologies, or multi-party computation. You will be involved in a EU research projects and advance/improve cryptography for secure and privacy preserving cloud based systems.

Further infos:

• Direct job posting: http://www.ait.ac.at/fileadmin/inserate/Jobs/Science/Scientist_for_Applied_Crypthography.pdf
• AIT Digital Safety & Security Department: http://www.ait.ac.at/departments/digital-safety-security

Closing date for applications: 30 April 2016

Contact:

• Thomas Loruenser, Department Digital Safety & Security, AIT Austrian Institute of Technology, or
• Maria Leonhard-Maurer, Head of Human Resources, E-Mail: maria.leonhard-maurer (at) ait.ac.at

More information: http://www.ait.ac.at/fileadmin/inserate/Jobs/Science/Scientist_for_Applied_Crypthography.pdf

This is a fantastic opportunity to work on a variety of exciting projects for a global leading company.

The successful candidate for this position will have significant experience performing security evaluation tasks on customers’ products – through code review, vulnerability analysis, test planning and interpretation of test results. The tasks are mainly carried out on embedded products, particularly payment devices, such as smart cards, POS terminals and mobile payment devices. A formal report will then be prepared for the customer.

Security Analysts are expected to maintain a high level of expertise regarding known threats and to follow technical developments in the embedded security arena to protect transaction applications. You will be particularly experienced in C, Java, assembly languages, GlobalPlatform and EMV standards, perhaps with a background in cryptography or data security. You will also be responsible for supporting the Project Management team on evaluation scoping, resource requirements, and certification body and customer expectations. Formal report writing in line with customer and certification scheme requirements will also be required.

Closing date for applications: 20 April 2016

Contact: Dom Gooch / 02032067564 / dominic.gooch (at) solagroup.com

We seek to hire a PhD student for the CryptoLux group led by Prof. Alex Biryukov. We are looking for candidates in one of the topics:

applied crypto, cryptanalysis, crypto finance, privacy.

Applications will be considered on receipt therefore applying before the deadline is encouraged.

Closing date for applications: 30 March 2016

Contact: Prof. Alex Biryukov

More information: https://www.cryptolux.org/index.php/Vacancies

The Cryptographic Security Team Leader is responsible for developing and maintaining the internal expertise in cryptography and more particularly in the security of algorithms executed on embedded systems. You will help organise and manage cryptographic tasks in order to meet the schemes and customers’ expectations.

This will include the analysis of cryptographic codes embedded in products under evaluation, the development and the realisation of high level of cryptographic side-channel attacks, and the support and the training of engineers for evaluation projects. You will also provide technical expertise in embedded cryptography and related attacks and help each team member to develop their own skills and expertise.

The position includes the representation of the Company in industry forums and the management of complex projects. As a team leader, responsibilities also include managing the performance of direct reports by developing accountabilities, establishing performance objectives, providing career counselling, feedback and guidance and ensuring that all policies are understood and adhered to.

Closing date for applications: 28 April 2016

Contact: Dom Gooch / 02032067564 / dominic.gooch (at) solagroup.com

Job description: The research group Cryptography and IT Security of the Institute of Theoretical Informatics (ITI) at KIT has an opening for a PhD position in the scope of the project "CyPhyCrypt: Advanced Crypto for New and Next-Generation Cyber-Physical Systems" (PIs: Andy Rupp at KIT and Christof Paar at RUB). This project is fully funded by the German Research Foundation (DFG). It deals with the development of novel CPS security mechanisms with provable security guarantees and computational requirements that can be met in practical settings, based on sound advanced cryptographic constructions (e-cash, anonymous reputation systems, optimistic fair-exchange, etc.). The PhD candidate will be working on security models for the considered CPS as well as on cryptographic constructions which can be shown secure in these models.

Qualification:

• Very good university degree (Master or equivalent) in Computer Science or Mathematics.
• Solid background in provable security, e.g., demonstrated by excellent grades in corresponding postgraduate courses or by publications.
• Self-motivation, team spirit, and willingness to work in interdisciplinary projects.

Application:Please send your application (CV, transcripts and certificates, names of references) by e-Mail to: andy.rupp (at) kit.edu

KIT is an equal opportunity employer. Women are especially encouraged to apply. Applicants with disabilities will be preferentially considered if equally qualified.

Closing date for applications: 4 March 2016

Contact: Andy Rupp, Karlsruhe Institute of Technology, Institute of Theoretical Informatics, email: andy.rupp (at) kit.edu, phone: +49 721/608-41862.

More information: http://www.pse.kit.edu/downloads/stellenangebote/PhD-Theoretische%20Informatik-engl.pdf

Applications are invited for a fixed-term post-doctoral researcher position (Security in Cyber Physical Systems) at University College Cork, Ireland. The position is within the the Security Group in the Department of Computer Science in conjunction with the recently established CONNECT Research Centre. The researcher will be part of the IRC/Chist-ERA programme funded project DYPOSIT: Dynamic Policies for Shared Cyber-Physical Infrastructures Under Attack. This project is being undertaken in collaboration with the Lancaster University, UK and Katholieke Universiteit Leuven, Belgium.

DYPOSIT will investigate the problem of large, shared cyber physical systems under attack. The project will consider the challenge of dynamically formulating and adapting security controls, rapidly and on-demand, in the face of unfolding attacks on a shared cyber physical system fabric integrating multiple applications run by a variety of stakeholders. The Post-Doctoral Researcher will primarily contribute to the development and implementation of a distributed security model for cyber physical systems in which trade-offs between threats, controls and other constraints, can be reasoned about in managing security policy deployment.

Applications are invited from those with a PhD qualification and publications in a directly relevant area. Applicants with a background in Computer Security and who are interested in developing research experience in cyber-physcial systems, or applicants with background in the modeling and reasoning about systems/networks and are interested in developing research experience in cyber-physcial systems security, are also invited to apply.

Informal enquiries should be addressed to Dr. Simon Foley, Department of Computer Science, University College Cork, Ireland (http://security.ucc.ie/foley).

Closing data is March 4, 2016. More information, post requirements and application details at:

http://www.ucc.ie/en/hr/vacancies/research/full-details-611543-en.html

Closing date for applications: 4 March 2016

We are looking for an excellent, motivated, self-driven doctoral student to work in the area of information security and cryptography. The position is for five years at the Department of Computer Science and Engineering. The PhD student will join Katerina Mitrokotsa’s group and will be funded by a project funded by the Swedish research council focusing on security and privacy issues in resource constrained devices.

The PhD student is expected to have a MSc degree or equivalent, and strong background in mathematics and/or theoretical computer science, with some background in cryptography.

The position is fully funded for five years. The call for expressions of interest will remain open until a suitable candidate is appointed.

For any inquiries or to apply for the position, submit a full research curriculum-vitae (cv), names of two references, and a research statement to Prof. Katerina Mitrokotsa (aikmitr@ chalmers.se) clearly indicating the position sought.

Successful candidates will help to design and evaluate cryptographically reliable and privacy-preserving authentication protocols.

Closing date for applications: 15 March 2016

Contact: Katerina Mitrokotsa
Associate Professor
Chalmers University of Technology
Department of Computer Science and Engineering
Göteborg, Sweden

More information: http://www.chalmers.se/en/about-chalmers/vacancies/Pages/default.aspx?rmpage=job&rmjob=3333