[FILLED] 3-year Engineer Position at CEA LIST - LSL
Posted: 28 Feb 2023
Keywords: Cybersecurity, Software Analysis, Formal Methods, OCaml
Mission
At the heart of the Paris-Saclay campus, CEA List’s Software Safety and Security Laboratory develops analysis tools to verify and enforce sensitive properties of software. Our goal is to provide trust in mission-critical and sensitive systems. We are open-source believers, and we take pride in seeing our science-fueled tools used for industry-grade applications.
We are looking for a 3-year engineer to join our Frama-C team starting as soon as possible. Frama-C is a sound static and dynamic analysis platform targeting C/C++/JavaCard source code. It relies on advanced techniques such as abstract interpretation and theorem proving. The platform has been used in academia and the industry to verify the safety and security of control systems and communication protocols, to prevent various CWE occurrences, and to prove functional properties on small and large codebases. Some of those results are displayed in OSCS, an open-source case study repository we maintain.
The main goal of this position is to develop and extend the applicability of Frama-C for cybersecurity purposes. The platform is used by developers, auditors, and evaluators to validate security properties, and we want to provide them with beyond-state-of-the-art methods, techniques, and tools to support their mission. This will be achieved by defining which security properties to target, developing the platform to make their verification possible, and providing relevant proof artefacts.
Responsibilities
- Develop new features and improvements for Frama-C
- Run case studies for partners and OSCS
- Interact with practitioners, prescribers, and the open-source community
- Contribute to the dissemination of the team results in top scientific and technical venues
- Contribute to the development of the team
Qualifications
- Master’s degree or PhD
- Ability to develop in OCaml or functional languages
- Practice of software cybersecurity
- Knowledge of formal methods
- Knowledge of the C language and ability to quickly grasp new ones
Application
Every potential candidate feeling they could fit the description are welcome to contact us or apply by emailing the persons indicated below. We try hard to run an inclusive team, so candidates from under-represented groups are certainly welcome. The selection process will include scientific, technical, and HR interviews.