CIFRE - Cybersecurity Engineer

15 Hours ago • All levels

Cyber Security

Job Description

This PhD subject proposes research into Post-Quantum Cryptography (PQC) transition strategies for automotive embedded systems and EV charging infrastructures. It addresses challenges like long product lifecycles, heterogeneous platforms, and complex supply chains, focusing on hybrid schemes, crypto-agility, and lightweight PQC implementations. The research will also cover production line security, EV charging interoperability, and compliance with global standards and regulations like UNECE WP.29, ISO/SAE 21434, NIST, and ANSSI.

Must Have:

Explore practical migration strategies to PQC for automotive systems.
Focus on hybrid schemes combining classical and PQC approaches.
Investigate crypto-agility mechanisms for smooth algorithm transitions.
Address onboard security functions relying on cryptography (secure boot, OTA updates, debug, diagnostic authentication, communications).
Study lightweight PQC implementations for constrained ECUs.
Analyze physical attacks and countermeasures on PQC in automotive embedded settings.
Adapt production line security and EV charging station interoperability for PQC.
Map regulatory and standardization requirements to automotive use cases.

Perks:

Join one of the largest global innovative companies, with more than 20,000 engineers working in Research & Development.
Work in a multi-cultural environment that values diversity and international collaboration.
Opportunity for career growth with more than 100,000 colleagues in 31 countries.
Be part of a business highly committed to limiting the environmental impact of its activities and ranked as the number one company in the automotive sector in terms of sustainable development.

Add these skills to join the top 1% applicants for this job

oops

game-texts

html

cryptography

algorithms

PhD Subject Proposal

Manager: Yacine Ladjici- Power Division Cybersecurity Discipline Director- Valeo Master Expert

Post-Quantum Cryptography Transition Strategies for Automotive Embedded Systems and EV Charging Infrastructures

The rapid progress of quantum computing threatens classical cryptographic schemes (notably RSA and ECC) that are currently used in vehicles, production plants, and connected infrastructures. The automotive industry faces a unique challenge: how to transition to quantum-resistant a.k.a. post-quantum cryptography (PQC) within long product lifecycles, heterogeneous embedded platforms, and complex supply chains. Some ECUs have extremely limited computational resources, while others can support advanced cryptographic algorithms; moreover, vehicles already deployed with classical cryptography must remain secure and updateable throughout service lifetimes that often exceed 15 years. This PhD will explore practical migration strategies to PQC, focusing on hybrid schemes combining classical and PQC approaches, crypto-agility mechanisms enabling smooth algorithm transitions (to switch from classical to PQC or hybrid or from a PQC algorithm to another one if later deemed insecure), onboard security functions that rely on cryptography (secure boot, secure OTA updates, secure debug, secure diagnostic authentication, secure onboard communications, etc.), lightweight implementations for constrained ECUs, physical attacks and countermeasures on PQC in automotive embedded settings.

In addition to onboard aspects, the research will address the adaptation of production line security (e.g., plant Hardware Security Modules, certificate provisioning workflows) and the interoperability of electric vehicle charging stations, which must securely communicate with both vehicles and institutional PKIs. The expected outcome is a framework for managing the secure and cost-efficient introduction of PQC into automotive embedded products and infrastructures, with clear, actionable recommendations for industry adoption.

The research will also consider the evolving landscape of worldwide standards and regulations. Automotive-specific frameworks (e.g., UNECE WP.29 [1], ISO/SAE 21434 [2]) must be reconciled with broader cryptographic guidance from national security agencies and international bodies. This includes standards and recommendations from NIST in the US [3, 3a, 3b], ANSSI and equivalent agencies in the EU [4], and relevant authorities in other regions, where different PQC strategies and timelines are emerging. A key objective is to map regulatory and standardization requirements to automotive use cases, ensuring that proposed migration paths remain globally compliant, interoperable, and future-proof.

[1] United Nations Economic Commission for Europe (UNECE), "Working Party on Automated/Autonomous and Connected Vehicles" [https://unece.org/transport/road-transport/working-party-automatedautonomous-and-connected-vehicles-introduction]

[2] International Organization for Standardization (ISO) and Society of Automotive Engineers (SAE), "ISO/SAE 21434:2021 - Road vehicles – Cybersecurity engineering" [https://www.iso.org/standard/70918.html]

[3] National Institute of Standards and Technology (NIST), "Post-Quantum Cryptography" [https://csrc.nist.gov/projects/post-quantum-cryptography]

[3a] NIST, "NIST Releases First 3 Finalized Post-Quantum Encryption Standards" [https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards?utm_source=chatgpt.com]

[3b] NIST, "Recommendations for Key-Encapsulation Mechanisms” [https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-227.pdf]

[4] French National Agency for the Security of Information Systems (ANSSI), "ANSSI views on the Post-Quantum Cryptography transition" [https://cyber.gouv.fr/sites/default/files/document/followuppositionpaperonpostquantumcryptography.pdf?utmsource=chatgpt.com]

_Join Us !

Being part of our team, you will join:

one of the largest global innovative companies, with more than 20,000 engineers working in Research & Development
a multi-cultural environment that values diversity and international collaboration
more than 100,000 colleagues in 31 countries... which make a lot of opportunity for career growth
a business highly committed to limiting the environmental impact if its activities and ranked by Corporate Knights as the number one company in the automotive sector in terms of sustainable development

More information on Valeo: https://www.valeo.com

Our Story:

Valeo is a global tech company, designing breakthrough solutions to reinvent the mobility industry. We are leader on our businesses, and recognized as one of the largest innovative companies. We offer a large number of job opportunities that are as diverse as they are rewarding. Whether you are a student seeking an internship, a recent graduate, or an experienced professional, you will find an interesting opportunity at Valeo for you!

More information on www.valeo.com

Working at Valeo:

Join Valeo! As part of a global community of passionate people, you will grow and thrive, setting the trend through advanced technologies, for greener, safer, and smarter mobility. All our employees are gathered around our common culture and have everyday the opportunity to #Dare.Care.Share