{"id":2307148,"url":"https://alion.io/job/huawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads","title":"Research Intern, Enclaves: Secure Hypervisor Agentic and LLM workloads","company":{"id":551741,"name":"Huawei","domain":"huawei.fi","url":"https://alion.io/company/huawei-fi","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"C","score":64,"open_postings":10,"ghost_share":0.6,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"intern","employment_type":"internship","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Helsinki, Finland"],"countries":["FI"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"C++","optional":false},{"name":"KVM","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Rust","optional":false},{"name":"Xen","optional":false}],"status":"live","first_seen_at":"2026-09-14T21:00:01Z","employer_posted_date":null,"last_verified_at":"2026-09-14T21:00:01Z","board_verified":false,"closed_at":null,"days_open":37,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":37},"description":"Helsinki System Security Lab (HSSL) Internship\n\nEnclaves: Secure Hypervisor Agentic and LLM workloads \n\n With the development of the Agentic AI, modern embedded systems are evolving to general-purpose and mixed-criticality systems, where virtualization has become one key key to guarantee the isolation between tasks with different, or in the case of AI Agents, differing criticality. Traditional server-based hypervisors (KVM and Xen) are not suitable for such workloads out-of-the box, as isolation properties, memory allotments, copy-on-write file systems or shared memory as well as MCP-interface control for LLM interaction are not part of the tools present in a classical confidential VM (CVM). Also the proper way to formulate access control for information flow in and out of a CVM with Agentic control is an open problem, as the access control decision largely must depend on the operation currently being executed (by the agent) rather than statically being fixed for a program / process / VM as is the norm. \n\n In this work we are looking for a PhD student in Computer Science who is very familiar and has hands-on experience with confidential VMs in the spirit of Linux CCC or ARM CCA; the intention is to work together on designing and implementing a realm-based architecture that is suitable for secure, isolated workloads in the AI era - satisfying all the requirements mentioned above, but also considering AI hardware integration (NPUs) and attestation mechanisms - including attestation for true model workloads (like LLMs). The intern will be working with experienced security experts in the Helsinki System Security Laboratory, and plan, design and implement the work under their guidance and collaboration. \n\n The internship is tailored to be a PhD internship in the field of CS. \n\n We are looking for: Students who are close to completing their PhD studies, and experience in \n\npromoting their work, e.g. via publication and / or standardization\n\nSolid experience with low-level, OS-like software (hypervisors), hardware architecture\n\nusing programming languages such as C, C++ or Rust.\n\nFamiliarity with virtualization technologies and confidential compute.\n\nSufficient skills to work and interact in English\n\nGood team-working skills\n\nStudents with interest to do research and explore new challenges\n\n The following we count as advantage: Knowledge of the ARM architecture and of ARM CCA technology.\n\n Location and internship period: This is a 6-month internship based at our Helsinki, Ruoholahti office. \n\n The Helsinki Systems Security Laboratory in Huawei Finland (HSSL) drives renewal and mastery in the field of platform / device related security technologies for consumer devices such as mobile phones and PCs. Our topical expertise lies in hardware-assisted memory protection, trustworthy execution (processor isolation primitives, hypervisor, TEE, kernel hardening), as well as functionality like device key management, attestation and integrity. We are also making inroads in the areas of security testing and AI protection on terminal devices.","description_format":"text","description_chars":3077,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Smartphones","Network Equipment"],"lifecycle":[{"event":"open","at":"2026-10-11T22:55:28Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.392,"p_room":0.45,"age_days":36,"expected_fill_days":24,"reasons":["seen:36","stale_co","win:tail","comp:junior"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/huawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads","json_url":"https://alion.io/job/huawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads.json","meta":{"generated_at":"2026-10-22T00:10:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":253,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":551741},"rest":"https://alion.io/mcp/rest/get_company?id=551741"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhuawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhuawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhuawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/huawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhuawei-research-intern-enclaves-secure-hypervisor-agentic-and-llm-workloads"}]}