Cryptography Evaluator Engineer

This is a non-renewable post for a limited duration of 4 years and open for the specific needs of a National Project. Accordingly, the external candidate selected for this post will continue to be considered an external candidate for the purposes of any future applications to the Agency.

Location

ESEC, Redu, Belgium

Description

Cryptography Evaluator Engineer in the System Security Section (TEC-SES), End-to-End Systems Division, Systems Department, Directorate of Technology, Engineering and Quality.

The System Security Section is responsible for the end-to-end system security engineering of the Agency’s missions, projects and activities in space, ground and user segments and communication links, as well as at system, subsystem, element and equipment level. It covers missions from study phase to definition of requirements, design, development, security integration / verification, and security service preparation, across the full stack, from physical to application layer.

To serve these functions, the System Security Section defines and executes the associated technology R&D and studies, as well as the required security engineering standards.

Using security laboratory facilities, the System Security Section performs vulnerability assessments at all levels of its responsibility, proposing detection methods, mitigation and protection measures, using security assessment tools and equipment.

This position will support a third party activity for the development of a national capability on the evaluation and certification of cryptographic algorithms and protocols.

Duties

Your tasks and responsibilities will include:

• supporting the project manager by providing recommendations and guidance on the evaluation and certification of cryptographic algorithms;
• regular reporting to the Project Manager on the status of the duties assigned under the Project;
• direct engagement with and advice to national customers and ESA experts on the strengths, weaknesses and design of cryptographic algorithms and parameter selection for them;
• deriving recommendations on cryptographic algorithms in relation to use case and security strength;
• fostering new security application areas for multidisciplinary activities, placing emphasis on innovative concepts, cutting-edge technologies and system architectures in the field of crypto algorithm evaluation and certification;
• supporting the training of colleagues, as required;
• continuously following technological trends and evolutions in the scientific fields relevant for this position, and in particular on the latest emerging threats, exploits, and industry trends;
• being engaged in other technical activities outside the main project in the area of your expertise, as requested.

Technical competencies

Cryptographic Design and Protocol Engineering

Mathematical Foundations of Cryptography

Cryptanalysis and Cryptographic Security Assessment

Formal Security Analysis and Proof Evaluation

Cryptographic Parameter Selection and Implementation Security

Cryptographic Evaluation, Certification and Standards

Behavioural competencies

Result Orientation

Operational Efficiency

Fostering Cooperation

Relationship Management

Continuous Improvement

Forward Thinking

For more information, please refer to the ESA Core Behavioural Competencies guidebook

Education and professional experience

A PhD in a relevant domain is required for this post together with 3 years of relevant professional experience.

Additional requirements

Experience in:

• the design of cryptographic algorithms and protocols;
• analysis of real-world security strength of public and private key crypto algorithms;
• the justified selection of parameter sets for real world crypto algorithms;
• the certification of crypto algorithms;
• dealing with crypto evaluation facilities and good knowledge of formal crypto evaluation test standards and analysis of formal evaluation results.

Very good knowledge of:

• mathematical foundations of modern public and private key crypto algorithms;
• number theory, abstract algebra, probability, discrete mathematics and computational complexity;
• security definitions, assumptions, and formal security proofs and how to assess them;
• how to to identify weaknesses in algorithm design and cryptographic constructions;
• differential and linear cryptanalysis, algebraic attacks, statistical attacks, and relevant attacks on public-key systems;
• how to evaluate brute-force resistance, key sizes, security margins, and attack complexity;
• how to assess randomness generation, key management, nonce handling, padding, and constant-time implementation requirements;
• how implementation flaws can undermine a mathematically sound algorithm;
• how to proof assumptions, reductions, and limitations.

Familiarity with formal verification or symbolic protocol analysis, where relevant.

Diversity, Equity and Inclusiveness

ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, religious beliefs, age, disability or other characteristics.

At the Agency we value diversity, and we welcome people with disabilities. Whenever possible, we seek to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process. If you would like to discuss this further, please contact us via email at [email protected].

Important Information and Disclaimer

In principle, recruitment will be within the advertised grade band (A2-A4). However, if the selected candidate has less than four years of relevant professional experience following the completion of the master’s degree, the position may be filled at A1 level.

Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations & eligible to acquire the security clearance by their national security administrations.

During the recruitment process, the Agency may request applicants to undergo selection tests. Additionally, successful candidates will need to undergo basic screening before appointment, which will be conducted by an external background screening service, in compliance with the European Space Agency's security procedures.

Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.

The information published on ESA’s careers website regarding working conditions is correct at the time of publication. It is not intended to be exhaustive and may not address all questions you would have.

Nationality and Languages Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Spain, Sweden, Switzerland, the United Kingdom and Canada, Cyprus, Latvia, Lithuania and Slovakia.

According to the ESA Convention, staff shall be recruited on the basis of their qualifications, taking into account an adequate distribution of posts among nationals of the Member States.

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.