A Researcher in the field of Secure Software Engineering for the Cybersecurity Center

Fondazione Bruno Kessler (FBK) is a private research institution devoted to excellence in research in numerous disciplines and designated to the role of keeping the Autonomous Province of Trento in the mainstream of European and international research. Each research area is assigned to a specific research Centre, of which there are twelve totals. Information regarding the research Centres, their activities and production are available at In particular, the FBK Cyber Security Centre (CS) develops digital technology and cyber security to foster collaboration between the various stakeholders through a combination of IT risk management techniques (in order to develop highly innovative security solutions that will mitigate vulnerabilities and reduce the risk of attacks) as well as trust management techniques (to improve the interaction between people and technology). As part of the FBK mission, which aims to achieve results of scientific excellence and to produce an impact on society, the Center's mission is to make these techniques available to the largest number of organizations, including SMEs, which account for a substantial part of the EU economy but lack cybersecurity expertise. To this end, integrating automated cyber risk assessment support with trust management that will have the ability to produce operational suggestions to assist ICT solutions designers, developers and administrators in their daily activities is critical. Workplace Description The candidate will be working in the SaFEWaRe (Secure Code Lifecycle for Applications and Networking) Unit, of FBK Cyber Security Center. SaFEWaRe focuses on enhancing software security. Our goal is to provide tools and practices that secure the code throughout its entire lifecycle and to ensure that code adheres to international regulations and standards (e.g., NIS2, EU AI Act, GDPR). Artificial Intelligence (AI) plays a dual role in our work: as a challenge, we focus on securely integrating AI into software systems, and, as a solution, we harness AI to enhance software analysis and reduce cyber risks through improved accuracy and automation. We are also engaged in industrial software development projects, which provide a robust foundation for our research; offering both practical inspiration and a means for real-world validation. Background information and description of research projects This position is offered within the project IPCEI Next Generation Cloud Infrastructure and Services (CIS): 8ra and the FBK CAITE project. The 8ra Initiative is a strategic European endeavour dedicated to create a resilient and scalable digital infrastructure tailored to Europe’s needs. At its core is the Important Project of Common European Interest on Next Generation Cloud Infrastructure and Services (IPCEI-CIS), bringing together 12 EU member states and about 120 industrial and research partners to drive Europe’s digital sovereignty. The main goal of IPCEI-CIS is to establish a "Multi-Provider Cloud-Edge Continuum" that operates independently of any single provider. This continuum embodies the seamless fusion of cloud and edge computing, enabling the flexible allocation of resources and applications between the cloud and the network edge. In 8RA, FBK is responsible for the project Cybersecurity & AI at the Edge (CAITE) whose aim is twofold. First, it aims to bring AI at the edge, by providing scalability and resource efficiency through the development of cooperative, distributed AI algorithms, optimising data, energy, and processing resources while adapting to the different computational environments and capabilities. Second, the project emphasises the creation of security, privacy-enhancing, and trust-aware services to ensure resilience and compliance in distributed AI-enabled applications. Three research centers of FBK cooperate and develop CAITE: the Augmented Intelligence Center, the Center for Cybersecurity, and the Digital Society Center. Job Description The SaFEWaRe research unit is seeking a motivated Researcher in the field of Secure Software Engineering and Software Regulatory Compliance. The selected candidate will contribute to activities aimed at delivering tools and techniques that enable software developers to produce secure code in compliance with regulations mandated by governments (e.g., NIS2, Eu-AI-Act, GDPR) and standards set by organizations (e.g., ISO). The successful candidate will contribute to the following tasks: Carry out applied research on Secure Software Engineering and Software Regulatory Compliance; Collaborate with project partners (academic and industrial) in both national and international initiatives; Contribute to scientific publications, dissemination activities, and project proposals; Supervise and mentor students during internships and thesis projects. The selected candidate may also be involved in additional activities or projects within the Centre, depending on organizational needs. Job requirements The ideal candidate must have the following requirements: Phd in Computer Science, Software Engineering, or related fields or equivalent experience; Strong understanding of secure coding practices and principles (e.g., OWASP Top 10); Familiarity with software engineering techniques (e.g., secure software development lifecycle (SDLC)); Solid understanding and practical experience in Artificial Intelligence (AI) and Machine Learning (ML) concepts, algorithms, and frameworks; Hands-on experience with popular ML libraries and tools (e.g., TensorFlow, PyTorch, scikit-learn); Familiarity with cloud architecture principles, scalability, and security best practices; Experience with containerization and orchestration tools (Docker, Kubernetes); Ability to contribute to the writing of scientific articles and project proposals; Language assessment according to the Common European Framework of Reference for Languages (CEFR): level of knowledge required. Knowledge of English will be verified during the interview on a technical or scientific topic and must be equal to or exceed level B2. Definitions of levels can be found at the following link Strong sense of curiosity and willingness to learn and develop; Ability to work both independently and in a team environment; Good communication and relational skills; Strong orientation to results, determination, flexibility and aptitude for problem-solving. Furthermore, the following elements will be positively evaluated: Understanding of regulatory frameworks and standards relevant to software development (e.g., NIS2, Eu-AI-Act, GDPR); experience in software regulation compliance; Experience on operational fulfilment (with automated and semi-automated tools and techniques) of cybersecurity requirements deriving from regulations; Good knowledge of the Italian language (both oral and written). Employment Type of contract: fixed-term contract Working hours: full-time (38 h per week) Start date: Preferably February 2026 Duration: 24 months Contract type: CCPL Research Foundation Personnel ( for a Third level Researcher, the current gross annual remuneration is Euro 44.528,13 Workplace: Povo, Trento (Italy) Benefits: flexi-time, company subsidized cafeteria or meal vouchers, internal car park, welcome office support for visa formalities and for research in accommodation, supplementary pension (Resaver, Laborfonds) and health fund (Sanifonds), family-work balance, free training courses, support on bank account opening, discount on public transport, sport, language course fees, counseling and psychological support service. More info at Application Interested candidates are requested to submit their application by completing the online form ( Please make sure that your application contains the following attachments (in pdf format): detailed CV (including relevant academic information such as a list of selected publications, and a link to an updated academic profile, for example Google Scholar); cover letter indicating why the candidate is suitable for this position. Application deadline: 16/01/2026 #J-18808-Ljbffr