Chercheur en sécurité Noyau Linux et eBPF - F​/H

Research Position in System Security

The mission of this research position is to produce and value new knowledge, sources of innovation for the Group, in the field of system security, particularly taking advantage of the generalization of the virtualization of computer environments. This research theme is particularly justified by the strategic importance for Orange of its field of application in cyber defense.

The research work conducted illuminates the Group on the relevant evolutions and disruptions in the field of systems (OS, virtualization, cloud, hardware/software interface) and security that may impact and/or create new opportunities for Orange.

You will need to:

• Understand the roles and levers of the virtualized infrastructure operator and the associated risks: take advantage of the strengths of virtualized infrastructure providers of the operator to offer security services and execution of operator services on a third-party infrastructure.
• Explore new innovative security approaches at the low-level software layers of the Linux Kernel based on eBPF technologies. The idea is to question the paradigm shifts that are taking place in virtualized infrastructures and embedded systems becoming programmable, observable, intelligent, and automatic and/or cloud/edge/equipment/IoT-Cloud continuum.
• Design and implement in collaboration with business experts, through prototypes, new system-level security mechanisms and evaluate them.
• Reverse your improvements and prototypes into the appropriate open source communities when it makes sense. Ensure to maintain a presence (through the review of other contributions) in these communities in order to maintain a high level of expertise and facilitate the adoption of future contributions of your own.
• Support Orange Security Research on all aspects of Linux and Kernel System.
• Write analysis reports.
• You will dialogue with the research and development teams in charge of related fields (services, network, Network Cloud Platform).
• You may be invited to represent Orange within open source communities to which you will contribute with your research outputs.
• You will publish the results of your work in scientific journals and conferences.
• You may be invited to file patents for Orange.
• You may be invited to participate in French or European collaborative projects.
• You may be invited to lead research partnership contracts.
• You may be invited to supervise doctoral students, post-doctoral students, apprentices, and interns.

You possess a doctorate or a diploma from an engineering school with experience in computer research and systems with a security focus.

You have supervised doctoral students, post-doctoral students, apprentices, and/or interns and have experience in scientific publications.

Professional Skills

• A dual profile of skills in Computer & System and security is required to carry out these research works in good conditions.
• The computer skills sought are in-depth knowledge in operating systems (eBPF technologies, virtualization techniques).
• Strong knowledge in security, and more particularly a pronounced interest in security at the low software layers (system/Linux) are indispensable.
• Basic knowledge of network virtualization.
• Experience in low-level system development (Linux kernel coding, C language, Bash).
• Desired experience in submitting code to an open source community.

Contribute with your research results to illuminate the Group in its strategy of positioning as an operator of infrastructures and a European leader in cybersecurity services (Orange Cyberdefense).

Strong possibility to propose new research topics, in line with the Group's general policy.

Additional Skills

• Appetite for research and initiative.
• Ability to make research outputs usable.
• Curiosity, open-mindedness, creativity, and dynamism.
• Ability to grasp complex problems and propose disruptive solutions.
• Methodological rigor and strong analytical and synthesis skills.
• Appetite for work in multidisciplinary teams and contribution to a common objective, while being autonomous in your activities.
• Ability to work in an international environment.
• Written and oral communication skills to convince and popularize research work to make it understandable to the widest audience.
• Fluent English.

The proposed gross remuneration is between 50,000 and 55,000 euros paid over 12 months. In addition to this, there is a variable component, an enterprise savings plan and pension, interest sharing, participation, health and welfare coverage, discounts on Orange offers and products, and social and cultural activities offered by the enterprise committee.

The ambition of the Innovation Division is to take Orange's innovation further and strengthen its technological leadership, by mobilizing our research capabilities to nurture responsible innovation at the service of humanity, to illuminate the strategic choices of the Group in the long term and to influence the global digital ecosystem. We train the experts of today's and tomorrow's technologies and ensure…