About the position

We have a vacancy for a PhD candidate at the Department of Information Security and Communication Technology, Norwegian University of Science and Technology. The position is funded and aligned with the project MarCy (Maritime Cyber Resilience), funded by the Research Council of Norway, the primary objective of which is the development of validated means for improving cyber resilience of maritime digital control systems and maritime operations.

The secondary objectives of the project include:

• Mapping the current state of maritime cyber security and resilience with respect to risks, regulations and mitigating activities.
• Develop demonstrators of maritime cyber resilience based on operational scenarios incorporating cyber risk.
• Develop and validate means to detect, prevent, circumvent, survive and recover from cyber incidents and attacks toward maritime digital systems and maritime operations.

The project is undertaken by: NTNU, Department of Information Security and Communication Technology, NTNU, Department of Ocean Operations and Civil Engineering, Norwegian Defense University College, KONGSBERG Defence & Aerospace AS, NORWEGIAN HULL CLUB, and DNV GL Group AS.

The position reports to the Head of department.

Job description

The specific focus of this position will be on the cyber security of the INS (Integrated Navigation system) and IBS (integrated Bridge System) of contemporary vessels. System-tailored penetration testing methodologies for the identification of vulnerabilities will be developed and applied. The results of this initial process will be integrated within an appropriate risk assessment methodology, thus providing a maritime cyber risk management framework, based not only on compliance with high level operational requirements, guidelines and recommendations, but also on technical and integration specific characteristics. Additional tasks related with these activities will include the identification of relevant operational scenarios for verification and validation purposes, and the consequent integration of the overall results into a maritime cyber resilience curriculum. The successful candidate will work in close collaboration with other PhD candidates and existing personnel of the CISaR group working in maritime cyber and information security. 

Qualification requirements

The PhD-position's main objective is to qualify for work in research positions. The qualification requirement is completion of a master’s degree or second degree (equivalent to 120 credits) or equivalent education with a grade of B or better in terms of NTNU’s grading scale, good knowledge of information security/penetration testing/risk management, and good understanding of maritime environments. Applicants with no letter grades from previous studies must have an equally good academic foundation. Applicants who are unable to meet these criteria may be considered only if they can document that they are particularly suitable candidates for education leading to a PhD degree.

The appointment is to be made in accordance with the regulations in force concerning State Employees and Civil Servants and national guidelines for appointment as PhD, post doctor and research assistant.

Other qualifications:

• Excellent written and oral communication skills. Applicants who neither are native English speakers nor from Scandinavia, must provide evidence of English language proficiency by means of one of the following tests: TOEFL, Academic IELTS and Cambridge CAE or CPE. Minimum scores need to be:
  • TOEFL: 600 (paper-based test), 92 (Internet-based test)
  • IELTS: 6.5, with no section lower than 5.5 (only Academic IELTS test accepted)
  • CAE/CPE: grade B or A.
• Fluency in Norwegian is desirable and will be considered positively.
• Knowledge of penetration testing methods and tools
• Knowledge and understanding of Information security risk management frameworks
• Ability to obtain Norwegian Defense Security clearance
• Experience/skills/understanding within the area of Nautical Science

The appointment is to be made in accordance with the regulations in force concerning State Employees and Civil Servants and national guidelines for appointment as PhD, postdoctor and research assistant.

Personal characteristics

The successful candidate should be capable of working independently, and with a problem solving mindset. Furthermore, the successful candidate should be keen on learning and working in teams in a structured manner, and take initiatives for personal and team growth. Finally, he/she should also enjoy interdisciplinary research. In the evaluation of which candidate is best qualified, emphasis will be placed on education, experience and personal suitability, in terms of the qualification requirements specified in the advertisement.

We offer

• exciting and stimulating tasks in a strong international academic environment
• an open and inclusive work environment with dedicated colleagues
• favourable terms in the Norwegian Public Service Pension Fund
• employee benefits

Salary and conditions

PhD candidates are remunerated in code 1017, and are normally remunerated at gross from NOK 449 400 per annum before tax. From the salary, 2% is deducted as a contribution to the Norwegian Public Service Pension Fund.

The period of employment is 3 years. Appointment to a PhD position requires admission to the PhD programme in [Information Security] (https://www.ntnu.edu/studies/phdis). As a PhD candidate, you undertake to participate in an organized PhD programme during the employment period. A condition of appointment is that you are in fact qualified for admission to the PhD programme within three months.

Appointment takes place on the terms that apply to State employees at any time, and after the appointment you must assume that there may be changes in the area of work.

General information

Working at NTNU

A good work environment is characterized by diversity. We encourage qualified candidates to apply, regardless of their gender, functional capacity or cultural background. Under the Freedom of Information Act (offentleglova), information about the applicant may be made public even if the applicant has requested not to have their name entered on the list of applicants.

Questions about the position can be directed to Professor Sokratis Katsikas, phone number: +47 91138581, e-mail: sokratis.katsikas@ntnu.no, and Dr. Vasileios Gkioulos, phone number: +47 61135162 , email: vasileios.gkioulos@ntnu.no

About the application:

Publications and other academic works that the applicant would like to be considered in the evaluation must accompany the application. Joint works will be considered. If it is difficult to identify the individual applicant's contribution to joint works, the applicant must include a brief description of his or her contribution.

Please submit your application electronically via Jobbnorge.no including:

• Your CV,
• Diplomas and certificates
• Contact details of two references 
• A cover letter describing your suitability for the position in accordance to the aforementioned qualifications
• Please refer to the application number 2019/9211 when applying.

Application deadline: 15.04.2019.

NTNU - knowledge for a better world

The Norwegian University of Science and Technology (NTNU) creates knowledge for a better world and solutions that can change everyday life.

Department of Information Security and Communication Technology

Research is vital to the security of our society. We teach and conduct research in cyber security, information security, communications networks and networked services. Our areas of expertise include biometrics, cyber defence, cryptography, digital forensics, security in e-health and welfare technology, intelligent transportation systems and malware. The Department of Information Security and Communication Technology is one of seven departments in the Faculty of Information Technology and Electrical Engineering .

Deadline 15.04.2019
Employer NTNU - Norwegian University of Science and Technology
Municipality Gjøvik
Scope Fulltime
Duration Temporary
Place of service Gjøvik