Intern in the System Security Section, Hardware Security

Join the System Security Section: Hardware Security Internship

Our team and mission

The End-To-End Systems Engineering Division (TEC-SE) at the European Space Agency (ESA) is responsible for supporting projects in the engineering of end-to-end (E2E) systems and their associated security aspects, E2E systems integration/verification activities (SIV), and service preparation. The division defines and executes technology developments and studies, manages verification and validation laboratory facilities, and supports the preparation of relevant engineering standards.

TEC-SE develops and supports the following engineering competences:

• E2E generic engineering tools, processes, and competences
• All aspects of Security engineering at System level, including cyber security, crypto, hardware and software security, link and data protection, frameworks, processes, vulnerability assessment, and countermeasures at system, element, and application levels including AI and Quantum
• Telecommunication and Connectivity systems and techniques
• Radio Navigation and PNT Systems and techniques, Formation Flying and RF metrology
• E2E System Comms for Telemetry, Telecommand and Payload Data Dissemination, Tracking, Ranging, Radio Science and Time Transfer functions

The responsibilities include the definition of concepts and algorithms, System/Segment/Payload-System architecture and trade-offs, performance and budgets analysis, interfaces and data flows, design and processing of signal in space, networks and protocols for Ground to Space and Space to Space links, for RF and Optical systems.

The System Security Section (TEC-SES) is responsible for the end-to-end system security engineering of Agency missions, projects, and activities, covering space, ground, user segments, and communication links at all levels. This includes the full lifecycle from study phase to requirements definition, design, development, security integration/verification, and security service preparation, across the full stack from physical to application layer. The section also defines and executes technology research and development (R&D) and studies, as well as required security engineering standards. Using security laboratory facilities, the section performs vulnerability assessments at all levels of its responsibility, proposing detection methods, mitigation and protection measures, and using security assessment tools and equipment.

Field(s) of activity for the internship

Topic of the internship: Assessment of Hardware Security Implementations

At ESA, we are working on cutting-edge products which necessitate a thorough assessment and verification of the security offered by their hardware implementations (including, but not limited to, user terminals of satellite systems, devices with incorporated security functions, etc.). We are looking for an enthusiastic and motivated intern to join the System Security Section to work on hardware security assessments.

As an intern, you will be trained on a state-of-the-art hardware security test bench, capable of performing side channel attacks, power glitches, and ElectroMagnetic injections. You will work on the security assessment of:

• Firmware implementations, including the examination of the conformance of software implementations against defined security standards
• Hardware implementations, covering the testing and verification against hardware security standards for processors, and identification of associated hardware mitigations

You will also have the opportunity to present your work and acquired experience internally (and potentially externally) to various teams, demonstrating your skillset, findings, and raising awareness. By the end of your internship, you will have learned to perform hardware security assessments using sophisticated test benches.

If you are passionate about hardware security and relevant security standards, and enjoy working on sophisticated testing benches, this internship will be a perfect fit for you.

Behavioural competencies

• Result Orientation
• Operational Efficiency
• Fostering Cooperation
• Relationship Management
• Continuous Improvement
• Forward Thinking

Education

You must be a university student, preferably studying at master’s level. In addition, you must be able to prove that you will be enrolled at your University for the entire duration of the internship.

Additional requirements

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another ESA Member State language is an asset.

During the interview, your motivation for applying to this role will be explored.

You should also have:

• Good interpersonal and communication skills
• Ability to work in a multi-cultural environment, both independently and as part of a team
• A cyber security background/training or education, including background on applied cryptography

Knowledge of hardware security is a plus.

Important Information and Disclaimer

During the recruitment process, the Agency may request applicants to undergo selection tests.

Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations.

The information published on ESA’s careers website regarding internship conditions is correct at the time of publication. It is not intended to be exhaustive and may not address all questions you would have.

Nationality

Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, and the United Kingdom.