PhD Positions in hypervisor/firmware security/fuzzing (m/f/d) - Group Abbasi

Saarbrücken, Germany

Group Abbasi is looking for motivated PhD applicants in the area of hypervisor/firmware security/fuzzing.


Ali Abbasi's group aims to design defense mechanisms and break existing embedded systems to improve their security. We combine deep technical insights into firmware and hardware to build novel analysis techniques, allowing us to tackle hard-to-test and previously unknown attack surfaces. We also design and implement new methods to protect embedded systems against various classes of attacks, both on the hardware and firmware levels.

    Odoo - Sample 1 for three columns

    What we offer

    • Competitive full time-gross base salary for E13 according to the scale of the TVöD (German Federal Employment Agreement) 

    • Comprehensive benefits package that includes health insurance coverage, 30 days of paid vacation and a robust pension scheme.

    • Possibilities for personal and professional growth, encompassing language classes, research support, as well as extracurricular and social activities

    • Our onboarding team will provide you with all the necessary support for a seamless and successful start to your journey with us

    Odoo - Sample 2 for three columns

    What we expect

    • You have a Bachelor's or Master’s degree from a research-oriented institution of higher education in a subject relevant to our research. 

    • You have solid programming skills in low-level languages like C/C++/Rust/Assembly and in-depth knowledge of operating systems.

    • You are interested in one of the following: Firmware security and reverse engineering; Automated software testing (e.g., fuzzing), especially in the context of hypervisors; Actively playing CTFs, having a public track record of vulnerability research, or building open-source security analysis tooling is a plus. A person with an offensive security mindset will enjoy the work in our group.

    • Excellent English! CISPA is an international research institute. Knowing German is really not necessary, although daily life is a bit smoother if you speak a few words and if you want to learn German, we offer free courses.

    Odoo - Sample 3 for three columns

    Working @ CISPA

    • We promote a flat hierarchy that encourages working together as a cohesive team and contributing one’s perspectives and ideas.

    • We offer an excellent research environment with close individual supervision, worldwide collaborations, and with significant funding for travel and equipment.

    • We maintain a trustworthy, inclusive, and safe space and are always looking for curious and creative new colleagues willing to learn & grow in an enjoyable and friendly team atmosphere.

    • Our location is in Saarbrücken, which is a city with international flair (e.g., an International School and distinguished cuisine influenced by the proximity to the French border). The city is also known for its green spaces, parks and proximity to nature, providing opportunities for relaxation and outdoor activities.


    If you want to learn more about Ali Abbasi, check out his website.

    Application Process

    Qualified candidates who wish to pursue a doctoral degree in a research area covered by CISPA faculty may apply at any time. We will accept applications throughout the year for exceptionally strong candidates. Admitted applicants will have an opportunity to visit the center and its partner institutions and interact with faculty and students before making their decision. Admitted students are advised by CISPA faculty. All doctoral researchers at CISPA will be a member of a graduate program at our partnering degree-granting universities. For example, PhD Students in Saarbrücken are part of the Saarbrücken Graduate School of Computer Science at Saarland University  , with whom we have a long-standing close collaboration.

    CISPA is committed to increasing the representation of women, minorities, and individuals with disability in Computer Science. In accordance with the Equal Opportunity Plan, CISPA aims at increasing the number of women in Computer Science, and explicitly encourages women to apply. Applications of severely disabled candidates with equivalent qualifications will be given priority. In general, we welcome applications regardless of gender, nationality, ethnic and social origin, religion/belief, disability, age, sexual orientation and identity.

    In case of interest in working at CISPA, press the "Apply now" button at the end of the page. Please upload your documents in PDF format on our application platform. Applications via email cannot be accepted.

    For any questions regarding the application process, please contact us at applications@cispa.de.

    About CISPA

    CISPA Helmholtz Center for Information Security is a German national Science Institution within the Helmholtz Association and provides a unique work environment that offers the advantage of a university department and a research laboratory alike. CISPA's mission is to rethink the digitized world of the future from the ground on up an make it safer through innovative cutting-edge research. CISPA is committed to the highest international academic standards. We offer a world-class research environment that grants extensive resources to a wide range of researchers and constitutes an attractive destination for the best talents and scientists from all countries. CISPA provides a highly international and diverse working environment, currently hosting researchers of over 40 nationalities.

    CISPA headquarter is located in Saarbrücken, in the tri-border area of Germany, France and Luxembourg. The CISPA campus is located close to Saarland University, known for its excellence in Computer Science & Cybersecurity programs; the Max Planck Institute for Informatics and the Max Planck Institute for Software Systems; the German Research Center for Artificial Intelligence (DFKI);  Fraunhofer Institute for Nondestructive Testing; and more.

    For more information about CISPA, see https://cispa.de/en

    All information on the processing of your personal data, your statements in the application process and your data privacy rights can be found in our data privacy policy.