Commit dcbbb6d8 authored by Allan Blanchard's avatar Allan Blanchard
Browse files

New Frama-C position

parent 28bec3c3
layout: job
title: Permanent Position at CEA LIST - LSL
position: Engineer/Researcher
duration: Permanent
short: Develop and extend the applicability of Frama-C for cybersecurity purposes
posted: 08-07-2021
keywords: cybersecurity, software analysis, formal methods, open source
#### Mission
At the heart of the Paris-Saclay campus, [CEA List]('s Software Safety and Security Laboratory develops analysis tools to verify and enforce sensitive properties of software. Our goal is to provide trust in mission-critical and sensitive systems. We are open-source believers and we take pride in seeing our science-fueled tools used for industry-grade applications.
We are looking for an engineer/researcher to join our [Frama-C]( team. [Frama-C]( is a sound static and dynamic analysis platform targeting C/C++/JavaCard source code. It relies on advanced techniques such as abstract interpretation and theorem proving. The platform has been used in academia and the industry to verify the safety and security of control systems and communication protocols, to prevent various CWE occurrences, and to prove functional properties on small and large codebases. Some of those results are displayed in [OSCS](, an open-source case study repository we maintain.
The main goal of this position is to develop and extend the applicability of [Frama-C]( for cybersecurity purposes. The platform is used by developers, auditors, and evaluators to validate security properties and we want to provide them with beyond-state-of-the-art methods, techniques, and tools to support their mission. This will be achieved by defining which security properties to target, developing the platform to make their verification possible, and providing relevant proof artefacts.
#### Responsibilities
- Develop new features and improvements for [Frama-C](
- Run case studies for partners and [OSCS](
- Interact with practitioners, prescribers, and the open-source community
- Contribute to the dissemination of the team results in top scientific and technical venues
- Contribute to the development of the team
#### Qualifications
- PhD or more than three years of experience in a research-intensive team
- Top scientific/technical publications or significant software developments
- Ability to develop in OCaml or functional languages
- Practice of software cybersecurity
- Knowledge of formal methods
- Knowledge of the C language and ability to quickly grasp new ones
#### Application
This position will be filled as soon as possible. Every potential candidate feeling they could fit the description are welcome to contact us or apply by emailing the persons indicated below. We try hard to run an inclusive team, so candidates from under-represented groups are certainly welcome. The selection process will include scientific, technical, and HR interviews.
- [Thibaud Antignac](
- [Andre Maroneze](
- [Virgile Prevosto](
\ No newline at end of file
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment