Job offer

The research aims to identify security risks within an organization arising from inappropriate user actions. It seeks to anticipate malicious actions and optimize the collection of evidence necessary for conducting forensic investigations to determine liability in the event of a confirmed incident. The project proposes the development of an advanced UEBA system that improves upon current solutions in two ways. First, by integrating specific contextual information from systems such as ERPs or CRMs to assess each user’s risk level in relation to common fraud and incidents. Second, by supporting forensic processes through evidence collection and preservation, action attribution, traceability to guarantee the chain of custody, and the generation of specialized reports. This last point is precisely the main focus of this contract. The goal is to integrate models and processes for evidence collection and preservation tailored to each user based on their potential risk level. Furthermore, the project aims to guarantee the forensic validity of the collected evidence to ensure it is irrefutable should a threat be confirmed.

The particular tasks to be carried out in this contract follow:

• Deployment of experimental environments (hardware + software)
• Maintenance of systems, networks, services, and applications.
• Development of prototypes and applications.
• Execution of tests within the scope of the research line.
• Documentation of systems, networks, services, applications, and experiments.

Research Field Computer science

Education Level Bachelor Degree or equivalent

Skills/Qualifications

Hold one of the various university degrees in the field of computer science or telecommunications, or equivalent qualifications from previous curricula Specific Requirements

Knowledge of:

• Operating system administration (Linux Ubuntu and Windows Server). Administration of virtual environments (Proxmox, VirtualBox, …) and, ideally, containers.
• Basic routing configuration, VLANs, firewalls, and essential network services (DHCP, DNS, SSH, VPN, web servers, databases).
• General programming languages, scripting, and rapid prototyping. PowerShell is also a plus.
• Assembly, cabling, troubleshooting of servers or lab equipment, and storage management (NAS/SAN, RAID).
• Proficiency in Git/GitHub/GitLab and documentation tools.
• Rigorous documentation, flexibility, adaptability, and autonomy.

Languages SPANISH, Computer science