Research Associate (QKD Security System Engineer and Security Evaluation) Full-time

Research Associate – QKD Security System Engineer And Security Evaluation Expert (Fraunhofer@NTU)

The Fraunhofer Singapore Research Centre FSR@NTU is an independent research centre established at Nanyang Technological University (NTU). It forms part of the Fraunhofer-Gesellschaft, one of the world's leading applied research organizations with around 32,000 employees, predominantly scientists and engineers.

In Singapore, Fraunhofer operates two closely linked but legally independent entities: Fraunhofer@NTU (FSR@NTU) and Fraunhofer Singapore Research Ltd — the first Fraunhofer affiliate in Asia. Both work in joint facilities to advance applied R&D bridging academia and industry in cutting-edge technological domains.

We invite applications for a Research Associate focusing on quantum hacking and quantum key distribution (QKD) security evaluation. You will work in an interdisciplinary and international team of quantum security experts, QKD system engineers, optical physicists, quantum information theorists, and cryptographic evaluation specialists. The joint mission: to build and validate next-generation frameworks for testing, evaluating, and certifying QKD systems and components in both laboratory and production environments.

This position will directly contribute to applied quantum communication security programmes in collaboration with academic and industrial partners. The role combines deep experimental work, hands-on system engineering, and methodical vulnerability analysis of practical QKD systems and components. It offers a unique opportunity to contribute to the future of trusted quantum communication, combining hands-on security evaluation, hardware-level assurance, and CC certification research, as well as contributing to high-assurance QKD system designs and implementations.

You will help define how quantum and classical cybersecurity converge – driving new assurance methodologies for quantum-safe communication systems at the interface of applied research, certification, and innovation.

Key Responsibilities

• Conduct advanced R&D in the security evaluation, certification, and assurance of QKD systems and hybrid quantum-classical architectures.
• Design and develop methods for performing structured evaluations of QKD components and systems in alignment with Common Criteria (ISO/IEC 15408) and related international assurance frameworks.
• Perform threat and risk assessments for QKD deployments, supply-chain elements, and network reference architectures.
• Investigate integrated attack models and multi-domain vulnerability correlations to develop unified frameworks that combine optical, electronic, and cryptographic attack vectors in practical QKD implementations.
• Conduct vulnerability and penetration testing across both classical and quantum subsystems, including protocol stacks, post-processing layers, as well as side-channel and fault-injection pathways.
• Develop and apply verification methodologies for classical and quantum security functions; covering software, firmware, hardware, and embedded interfaces through penetration testing, reverse engineering, and structured validation.
• Develop blueprints and contribute to the international harmonization of QKD certification methodologies and evaluation practices.
• Design and implement assurance frameworks bridging classical cryptographic certification and emerging quantum-safe and quantum communication standards (ISO 23837, ITU-T, ETSI QKD, ISO/IEC SC27, TARA).
• Contribute to the design of an open-source high-assurance QKD reference system.
• Collaborate with industrial and regulatory partners to align QKD and quantum communication products with national and international certification and compliance requirements.
• Contribute to publications, workshops, and standards initiatives related to quantum communication security, certification, and hardware assurance.

Job Requirements

• MSc/MEng in Electrical Engineering, Computer Engineering, Cybersecurity, Physics, or a related discipline, with specialization in security evaluation or hardware assurance.
• Strong understanding of Common Criteria (ISO/IEC 15408) and FIPS 140-3 certification methodologies, including experience with evaluation, security targets, or protection profiles.
• Proven expertise in vulnerability assessment, penetration testing, and system evaluation of secure hardware or communication systems.
• Familiarity with risk assessment frameworks such as ISO/IEC 27001/27005, ISO 23837, ITU-T, or ETSI QKD standards, as well as relevant studies (e.g., BSI implementation attack analysis on QKD systems).
• Working knowledge of QKD theory and implementation architectures, or strong interest in quantum communication and hybrid cryptographic security.
• Experience with embedded-system security, reverse engineering, or firmware analysis using industry-standard tools and techniques.
• Excellent communication and collaboration skills, with the ability to bridge quantum security, cybersecurity risk management, and certification domains in an interdisciplinary, international environment.
• Familiarity with quantum technology policy and standardization landscapes is an advantage.