We are currently reorganising our job portal. During the transition phase, you can find more jobs here: previous DLR job portal

Computer Scientist (f/m/x) (Cyber) Security of Critical Infrastructure and Air Traffic Systems
Job Description
Req ID:  1087
Place of work:  Braunschweig
Starting date:  as of now
Career level:  Graduates, Experienced professionals
Type of employment:  Full-time, Part time
Duration of contract:  initially limited to 3 years

Remuneration: Remuneration is in accordance with the Collective Agreement for the Public Sector - Federal Government (TVöD-Bund)

Enter the fascinating world of the German Aerospace Center (Deutsches Zentrum für Luft- und Raumfahrt e. V.; DLR) and help shape the future through research and innovation! We offer an exciting and inspiring working environment driven by the expertise and curiosity of our 11,000 employees from 100 nations and our unique infrastructure. Together, we develop sustainable technologies and thus contribute to finding solutions to global challenges. Would you like to join us in addressing this major future challenge? Then this is your place!

Vacancy-ID:  1087 
Place of work:  Braunschweig 
Starting date:  as of now 
Career level:  Graduates; Experienced professionals 
Type of employment:  Part time; Full-time 
Duration of contract:  initially limited to 3 years 
Remuneration:  Remuneration is in accordance with the Collective Agreement for the Public Sector - Federal Government (TVöD-Bund)

 

The Institute of Flight Guidance conducts basic and applied research in interdisciplinary research teams on the optimal guidance of aircraft on the ground and in the air. It uses an integrated test infrastructure. The aim is to make more flexible and efficient use of airspace and to design airports to maximise throughput while minimising fuel consumption and environmental impact.

 

What to expect

Increasing digitalisation and networking in air traffic make cyber security a key aspect for the protection of critical infrastructures. Air traffic management (ATM) and air traffic control in particular rely on highly available, secure and resilient systems to ensure smooth and protected operations. In view of new threat scenarios, it is essential to systematically integrate security concepts from the outset ("security by design").

 

At the Institute of Flight Guidance, measures are being developed to increase cyber resilience in order to protect air traffic system networks against unauthorised interference. This includes identifying potential points of attack, analysing threat scenarios and developing and validating robust security architectures. In addition to technical protective measures, the human factor is also taken into account as a decisive element in security strategies.

 

New methods for security assessment and concept validation are to be developed and existing approaches adapted to the special requirements of air transport. The task includes the development and application of procedures for the assessment of cyber security, the verification of their effectiveness and their implementation in specific projects to secure critical infrastructures in air transport.

 

Your tasks

  • Research into security assessment methods for air traffic systems and infrastructures, particularly in the field of air traffic management and air traffic control
  • Analysing threat scenarios and security requirements to identify potential vulnerabilities in ATM systems and infrastructures
  • Develop and implement new assessment techniques, including penetration testing and application of the NIST Cybersecurity Framework, for security testing of software components and data exchange procedures
  • Conducting simulations and experiments to test the cybersecurity of ATM systems under real and simulated conditions
  • Development and operation of an aviation security laboratory, including the specification, integration and testing of relevant system components
  • Collaboration in the development of a dynamic security management concept for aviation for the continuous improvement of security architectures
  • Documentation and publication of research results, both in internal project reports and at international conferences and in scientific journals

 

Your profile

  • Completed scientific university degree (Master's/Diploma Uni) in computer science (e.g. computer engineering) or other degree programmes relevant to the job
  • Programming experience in Python, C/C++ or Java for security-critical applications
  • Experience with network security and protocols (e.g. TLS, IPSec, Zero Trust)
  • Knowledge of cybersecurity methods (e.g. penetration testing, NIST Cybersecurity Framework, PART-IS)
  • Experience in modelling and simulating security-critical systems
  • Knowledge of threat modelling and risk analyses for critical infrastructures
  • Creative drive, team spirit and an independent, scientific way of working

 

We offer

DLR stands for diversity, appreciation and equality for all people. We promote independent work and the individual development of our employees both personally and professionally. To this end, we offer numerous training and development opportunities. Equal opportunities are of particular importance to us, which is why we want to increase the proportion of women in science and management in particular. Applicants with severe disabilities will be given preference if they are qualified.

 

We offer
DLR stands for diversity, appreciation and equality for all people. We promote independent work and the individual development of our employees both personally and professionally. To this end, we offer numerous training and development opportunities. Equal opportunities are of particular importance to us, which is why we want to increase the proportion of women in science and management in particular. Applicants with severe disabilities will be given preference if they are qualified.

 

We look forward to getting to know you!

 

If you have any questions about this position (Vacancy-ID 1087) please contact:

 

Sven Kaltenhäuser 
Tel.: +49 531 295 2560 

 

Start of internal publication: 
Internal job advertisement deadline: