Computer Scientist (f/m/d) – (Cyber) Security of Critical Infrastructures and Air Traffic Systems

Computer Science (w/m/d) - (cyber)security of critical infrastructures and air traffic systems Reference number: 1087 Place of work: Braunschweig Date of entry: from now Career level: graduates & graduates, professionals Degree of employment: full time, part-time Duration of employment: 3 years Payment: Compensation is carried out in accordance with the applicable collective agreements of the public service (Bund). Get into the fascinating world of the German Aerospace Center (DLR) to help shape the future with research and innovation! With the know-how and curiosity of our 11,000 employees from 100 nations as well as our unique infrastructure, we offer an exciting and inspiring working environment. Together we develop sustainable technologies and thus contribute to solving global challenges. Do you want to tackle this great task of the future with us? Then your place is with us! In interdisciplinary research teams, the Institute for Flight Management conducts basic and application-oriented research for the optimal management of aircraft on the ground and in the air. It uses an integrated experimental infrastructure. The aim is to make the airspace more flexible and efficient and to align airports with optimal throughput while minimizing fuel consumption and environmental pollution.

The increasing digitalization and networking in air transport make cyber security a central aspect for the protection of critical infrastructures. In particular, air traffic management (ATM) and air traffic control are dependent on high-availability, safe and resistant systems to ensure smooth and protected operation. In view of new threat scenarios, it is essential to systematically integrate security concepts from the outset (“Security by Design”). In the ATM simulation department, measures to increase cyber resilience are developed to protect system allies in air traffic against unauthorized interventions. These include identifying potential points of attack, analyzing threat scenarios and developing and validating robust security architectures. In addition to technical protective measures, the human factor is also considered a key element in safety strategies. New methods are to be developed and existing approaches to the specific requirements of air transport are to be adapted for safety assessment and concept validation. The task is to develop and apply procedures for assessing cyber security, reviewing its effectiveness and implementation in concrete projects to secure critical air transport infrastructures. Your tasks Research into safety assessment methods for air transport systems and infrastructures, in particular in the field of air traffic management and air navigation Analysis of threat scenarios and security requirements to identify potential vulnerabilities in ATM systems and infrastructures Development and implementation of new assessment procedures, including penetration testing and application of the NIST cybersecurity framework, security testing of software components and data exchange procedures Implementation of simulations and experiments to verify the cybersecurity of ATM systems under real and simulated conditions Establishment and operation of an aviation security laboratory, including specification, integration and verification of relevant system components Working to develop a dynamic security management concept for aviation to continuously improve security architectures Documentation and publication of research results, both in internal project reports and at international conferences and in scientific journals

completed academic studies (Master/Diplom University) of Computer Science (e.g. Technical Computer Science, Computer Engineering) or other courses relevant to the activity Programming experience in Python, C/C++ or Java for safety-critical applications Experience with network security and protocols (e.g. TLS, IPSec, Zero Trust) Knowledge of cybersecurity methods (e.g. penetration testing, NIST Cybersecurity Framework, PART-IS) Experience in modelling and simulation of safety-critical systems Knowledge of Threat Modeling and Risk Analysis for Critical Infrastructures willingness to design, team spirit and an independent, scientific working Remuneration: Group 13 TVöD

DLR stands for the diversity, appreciation and equality of all people. We promote independent work and the individual further development of our employees in the personal and professional environment. Our numerous continuing and continuing training opportunities are available to you. Opportunity is a particular concern to us, so we want to increase the proportion of women in science and leadership in particular. We prefer applications of severely disabled people with professional suitability. JOBV1_EN