POSTDOCTORAL RESEARCHER: TYPE-BASED ENFORCEMENT OF SECURE PROGRAMMING GUIDELINES (M/F/D)fortiss is the research institute of the Free State of Bavaria for software-intensive systems and services with headquarters in Munich. The institute currently employs around 180 employees, who collaborate on research, development and transfer projects with universities and technology companies in Bavaria, Germany and Europe. Research is focused on state of the art methods, techniques and tools of software development, systems & service engineering and their application to reliable, secure cyber-physical systems, such as the Internet of Things (IoT). fortiss has the legal structure of a non-profit limited liability company (GmbH). Its shareholders are the Free State of Bavaria (as majority shareholder) and the Fraunhofer Society for the Promotion of Applied Research. www.fortiss.org
We are Looking for a new team member in the GuideForce Project, starting soon as possible:
Postdoctoral Researcher: Type-based Enforcement of Secure Programming Guidelines (m/f/d)
You will contribute to the development of a lightweight static analysis method for verifying adherence to secure programming guidelines in Java programs. The GuideForce project combines ideas from type systems and abstract interpretation to develop a scalable, type-based analysis method for Java. While guidelines for secure programming are the first use-case, other applications are of interest too.
The project goals are:
- Improving the expressiveness of the type-based analysis method
- Extending the method to handle more features of the Java programming language, such as reflection, concurrency, generic types and higher-order features.
- Develop practical applications of the method: Capture various kinds of guidelines from different application areas, in particular security, improve the implementation in a tool and assess the practicability and scalability of the approach under real-world conditions
- You hold or are close to completing a Ph.D. in the area of programming languages
- You have experience in one of the following areas: type systems and logic, static program analysis, abstract interpretation, implementation of programming languages
- Solid programming skills
- Excellent communication skills in English, basic skills in German are a plus, but not required
- An „open space“ organizational culture, that allows to learn and apply competencies as well as to take on responsibilities in different areas in a wide network of government and industry partners
- In-house education and trainings
- A salary according to the public service labor agreement at the federal state level (Tarifvertrag für den Öffentlichen Dienst der Länder / TV-L)