FBK is looking for a Researcher in the field of Secure Software Engineering and Software Regula[...]

Fondazione Bruno Kessler (FBK) is a private research institution devoted to excellence in research in numerous disciplines and designated to the role of keeping the Autonomous Province of Trento in the mainstream of European and international research. Each research area is assigned to a specific research Centre, of which there are twelve totals. Information regarding the research Centres, their activities and production are available at http://www.fbk.eu/research-centers.

In particular, the FBK Cyber Security Centre (CS) develops digital technology and cyber security to foster collaboration between the various stakeholders through a combination of IT risk management techniques (in order to develop highly innovative security solutions that will mitigate vulnerabilities and reduce the risk of attacks) as well as trust management techniques (to improve the interaction between people and technology). As part of the FBK mission, which aims to achieve results of scientific excellence and to produce an impact on society, the Center's mission is to make these techniques available to the largest number of organizations, including SMEs, which account for a substantial part of the EU economy but lack cybersecurity expertise. To this end, integrating automated cyber risk assessment support with trust management that will have the ability to produce operational suggestions to assist ICT solutions designers, developers and administrators in their daily activities is critical.

Workplace Description The candidate will be working in the SaFEWaRe (Secure Code Lifecycle for Applications and Networking) Unit of FBK Cyber Security Center. SaFEWaRe focuses on enhancing software security and software regulatory compliance. Our goal is to provide tools and practices that secure the code throughout its entire lifecycle and to ensure that code adheres to international regulations and standards (e.g., EU AI Act, NIS2, GDPR). Artificial Intelligence (AI) plays a dual role in our work: as a challenge, we focus on securely integrating AI into software systems, and, as a solution, we harness AI to enhance software analysis and reduce cyber risks through improved accuracy and automation.

We are also engaged in industrial software development projects, which provide a robust foundation for our research; offering both practical inspiration and a means for real-world validation.

Background information and description of research projects This position is offered within the IPCEI Next Generation Cloud Infrastructure and Services (CIS): 8ra and the FBK CAITE project.

The 8ra Initiative is a strategic European endeavour dedicated to create a resilient and scalable digital infrastructure tailored to Europe's needs. At its core is the Important Project of Common European Interest on Next Generation Cloud Infrastructure and Services (IPCEI-CIS), bringing together 12 EU member states and about 120 industrial and research partners to drive Europe's digital sovereignty. The main goal of IPCEI-CIS is to establish a Multi-Provider Cloud-Edge Continuum that operates independently of any single provider. This continuum embodies the seamless fusion of cloud and edge computing, enabling the flexible allocation of resources and applications between the cloud and the network edge. In 8RA, FBK is responsible for the project Cybersecurity & AI at the Edge (CAITE) whose aim is twofold. First, it aims to bring AI at the edge, by providing scalability and resource efficiency through the development of cooperative, distributed AI algorithms, optimising data, energy, and processing resources while adapting to the different computational environments and capabilities. Second, the project emphasises the creation of security, privacy-enhancing, and trust-aware services to ensure resilience and compliance in distributed AI-enabled applications. Three research centers of FBK cooperate and develop CAITE: the Augmented Intelligence Center, the Center for Cybersecurity, and the Digital Society Center.

Job Description The SaFEWaRe research unit is seeking a motivated Researcher in the field of Secure Software Engineering and Software Regulatory Compliance. The selected candidate will contribute to activities aimed at delivering methodologies, tools, and techniques that enable software developers to produce secure code in compliance with regulations mandated by governments (e.g., EU AI Act, NIS2, GDPR) and standards set by organizations (e.g., ISO, ETSI).

The successful candidate will contribute to the following tasks:

Conduct applied research on Secure Software Engineering and Software Regulatory Compliance;

Collaborate with project partners (academic and industrial) in both national and international initiatives;

Contribute to scientific publications, dissemination activities, and project proposals;

Supervise and mentor students during internships and thesis projects.

Depending on organizational needs, the selected candidate may also be involved in additional activities or projects within the Centre.

Job requirements The ideal candidate must have the following requirements:

Master's degree in Computer Science, Software Engineering, or related fields, or equivalent experience;

Familiarity with software engineering techniques (e.g., Secure Software Development Lifecycle (SDLC));

Strong understanding of secure coding practices and principles (e.g., OWASP Top 10);

Knowledge of system trustworthiness and the factors that ensure secure and reliable system behavior with particular attention to AI systems

Knowledge of security and trustworthiness of AI models.

Ability to contribute to the writing of scientific articles and project proposals;

Strong interest and orientation towards research activities;

Language assessment according to the Common European Framework of Reference for Languages (CEFR): level of knowledge required. Knowledge of English will be verified during the interview on a technical or scientific topic and must be equal to or exceed level B2. Definitions of levels can be found at the following link https://www.coe.int/en/web/common-european-framework-reference-languages/level-descriptions;

Strong sense of curiosity and willingness to learn and develop;

Teamwork approach, good communication and relational skills;

Strong orientation to results, determination, flexibility and aptitude for problem-solving.

Furthermore, the following elements will be positively evaluated:

Phd in Computer Science, Software Engineering, or related fields;

Understanding of regulatory frameworks and standards relevant to software development (e.g., EU AI Act, NIS2, GDPR) and experience in software regulation compliance;

Experience on operational fulfilment (with automated and semi-automated tools and techniques) of requirements deriving from regulations;

Good knowledge of the Italian language (both oral and written).

Employment Type of contract : fixed-term contract

Working hours : full-time (38 h per week)

Start date : Preferably October 2026

Duration : 24 months

Contract type : CCPL Research Foundation Personnel (https://trasparenza.fbk.eu/ita/Personale/Contrattazione-collettiva/Rinnovo-CCPL-delle-Fondazioni) for a Fourth or Third-level Researcher, the current gross annual remuneration ranges from 41.245,00 Euro to 47.182,01 Euro, depending on background and expertise in the field.

Benefits : flexi-time, company subsidized cafeteria or meal vouchers, internal car park, welcome office support for visa formalities and for research in accommodation, supplementary pension (Resaver, Laborfonds) and health fund (Sanifonds), family-work balance, free training courses, support on bank account opening, discount on public transport, sport, language course fees, counseling and psychological support service. More info at https://www.fbk.eu/en/work-with-us/

#J-18808-Ljbffr