Systems security researcher F/M
Orange
about the role
The mission of this Research position is to produce and promote (through scientific publications, patents, transfer support, academic and industrial partnerships, communication) new knowledge that is a source of innovation for the Group in the field of system security, particularly by taking advantage of the widespread virtualisation of IT environments. This research topic is particularly relevant given the strategic importance of its field of application in cyber defence for Orange.
The research carried out provides the Group with insights into relevant developments and disruptions in the field of systems (OS, virtualisation, cloud, hardware/software interface) and security that may impact and/or create new opportunities for Orange.
Activities
You will need to:
- Understand the roles and levers of the virtualised infrastructure operator and the associated risks: leverage the operator's virtualised infrastructure provider assets to offer security services and operator service execution on third-party infrastructure
- Explore new innovative security approaches at the low-level software layers that virtualise IT and network infrastructures, questioning the paradigm shifts that are taking place: for example, infrastructures and embedded systems becoming programmable, observable, intelligent and automatic and/or cloud/edge/equipment/IOT-Cloud continuum
- Design and implement, in collaboration with business experts, new system-level security mechanisms through prototypes and evaluate them
- Contribute improvements and prototypes to the appropriate open source communities when appropriate. Maintain a presence (by reviewing other contributions) in these communities in order to maintain a high level of expertise and facilitate the adoption of future contributions.
- Support Orange Research in all aspects of system security
- Write analysis reports
- You will liaise with the research and development teams responsible for related areas (services, network, cloudification, edge)
- You may be required to represent Orange within open source communities, to which you will contribute your research findings
- You will publish the results of your work in scientific journals and conferences
- You may be required to file patents for Orange
- You may be required to participate in French or European collaborative projects.
- You may be required to manage partnership research contracts.
- You may be required to supervise PhD students, post-PhD students or interns.
about you
You have a PhD or an engineering degree with experience in research, or you have a Master's degree in research with research output during your internship, in computer science with a focus on security.You have supervised PhD students, post-PhD students, apprentices and/or interns and have experience in scientific publications.
Professional skills
- A dual profile of IT and security skills is required to carry out this research work successfully
- The IT skills sought are advanced knowledge of operating systems with (in virtualisation)
- Strong knowledge of security, and more specifically a keen interest in security at the low software layers (system) is essential
- Basic knowledge of network virtualisation
- Experience in low-level system development (Linux kernel coding, C language)
- Experience in submitting code to an open source community is desirable
The following skills should be systematically included:
- An interest in research and taking initiative
- The ability to make research outputs usable
- Curiosity, open-mindedness, creativity and dynamism
- The ability to understand complex problems and propose disruptive solutions
- Methodological rigour and strong analytical and summarising skills
- Enjoy working in multidisciplinary teams and contributing to a common goal, while being able to work independently
- Ability to work in an international environment
- Written and oral communication skills to convey and popularise research work
- Fluent english
additional information
Contribute research findings to inform the Group's strategy for positioning itself as an infrastructure operator and European leader in cybersecurity services (Orange Cyberdefense).
Strong opportunity to propose new research topics in line with the Group's overall policy.
department
The NSS (Fixed & Mobile Networks Security and Supervision) team within the NSEC (Network Security) department of the CASE (Core Networks, Automation, Security, E2E Services) division supports the Group's structural projects by addressing operational security issues and supervising complex end-to-end networks, orchestration and security automation. It actively contributes to the various stages of design, tool development (testing/auditing) and the application of AIML (Artificial Intelligence and Machine Learning) techniques for the detection of threats/attacks/fraud and the monitoring of security alerts (events, logs, incidents, etc.). The team's mission includes supporting countries in the operational implementation/deployment of security requirements and research activities on the observability of software and programmable network security.
contract
Regular
Hybrid work
