Research Software Engineer (AI/ML) (m/f/d) - Keyword: 32-2025 AI/ML CySAF -

CySAF (Cybersecurity Assessment Framework) is a practical framework that largely automates and systematizes security assessments in critical infrastructures. It combines current regulatory requirements with industry-specific expertise, reliably identifies vulnerabilities and provides clear recommendations for action so that operators of energy, water and other supply networks can more easily demonstrate compliance and strengthen their cyber resilience in the long term.

Activities include research and development work on the design, development and evaluation of AI-based IT security solutions, with a focus on the development and integration of language models (LLMs) for IT security applications, the optimization of APIs for system integration and the automation and optimization of data processing processes. To this end, sample solutions and functional prototypes are designed, implemented and tested in order to develop algorithms for data processing and analysis, validate scalable and robust AI models and design modular software solutions and secure, scalable interfaces. In parallel, an in-depth analysis of existing and new methods is carried out to identify optimization potential and systematically investigate formal correspondences between safety requirements and technical implementations. The task also includes carrying out tests to ensure system stability as well as ongoing research into the state of the art in areas such as AI model scaling or API design. Depending on the results and available resources, the results obtained will be scientifically processed and published in specialist journals, conference papers or workshops.

The following knowledge and skills are required

• academic degree (Master's) in computer science, applied computer science, data science or related disciplines,
• very good knowledge in Artificial Intelligence and Data Science, especially in Retrieval-Augmented Generation (RAG), Large Language Models (LLMs), Fine-Tuning and Prompt Engineering,
• Confident handling of ML and NLP frameworks such as PyTorch, TensorFlow, Huggingface and spaCy,
• very good programming skills in Python as well as experience with other backend languages such as Java,
• Experience in software development, data analysis (e.g. Pandas and NumPy) as well as SQL and NoSQL databases,
• Confident handling of API design (REST, gRPC) and system integration in scalable architectures,
• Experience with UNIX systems, containerization (e.g. Docker) and version control with Git/GitHub,
• Basic knowledge of IT security, data protection, threat modeling and relevant standards (e.g. ISO 27001),
• very good written and spoken German and English skills.

We expect from you

• analytical mindset, structured problem-solving skills, ability to work in a team and willingness to familiarize yourself with the requirements of critical infrastructures.

We offer you

• an interesting and challenging field of activity,
• flexible and family-friendly working hours within the framework of the applicable service agreement,
• personal and professional development opportunities through targeted training and further education,
• attractive social benefits (company pension scheme, annual special payment, capital-forming benefits),
• company health management with offers for workplace health promotion and
• the opportunity to use a job ticket.