PREP0003807 IoT & AI Product Security Standards Researcher

PREP Research Associate

Opportunity No.: PREP0003807

This position is part of the National Institute of Standards and Technology (NIST) Professional Research Experience (PREP) program. NIST recognizes that its research staff may wish to collaborate with researchers at academic institutions on specific projects of mutual interest, and thus requires that such institutions must be the recipient of a PREP award. The PREP program requires staff from a wide range of backgrounds to work on scientific research in many areas. Employees in this position will perform technical work that underpins the scientific research of the collaboration.

APPLY ONLINE HERE

IoT & AI Product Security Standards Researcher

Project Description:

Guidelines Development for Smart IoT Product Security

Key Responsibilities: 

• Developing guidelines for Smart IoT products' security across the lifecycle from product development and manufacturing through use and operation to maintenance and end of life
• Identifying the interaction of IoT product components with AI engines (i.e., providing data to feed models, which in turn identify autonomous actions for the IoT product to take) and the cybersecurity risks of each step of this interaction
• Updating and completing CSWP 33 Product Development Cybersecurity Handbook: Concepts and Considerations for IoT Product Manufacturers to incorporate products with AI components
• Updating analysis of international IoT cybersecurity standards and guidance, identifying common elements and unique contributions for consideration
• Identifying risk modeling and management methods that are applicable to IoT products with AI components
• Identifying cybersecurity and privacy implications of the convergence of IoT and AI
• Presenting results at internal meetings and occasional meetings with external stakeholders
• Ensuring that results, protocols, software, and documentation have been archived or otherwise transmitted to the larger organization

Desired Qualifications: 

• A Master’s degree in Computer Science, Cybersecurity, Artificial Intelligence, Systems Engineering, Industrial Design or Engineering, Manufacturing, Engineering Management, Technical policy or related field
• 6 years of relevant experience
• Familiarity with IoT product development processes
• Familiarity with autonomous systems
• Familiarity with artificial intelligence systems
• Familiarity with cybersecurity guidance and standards
• Strong oral and written communication skills

Other Details:

• Full-time: the participant is expected to work 40 hours a week
• Location: Hybrid - the participant will work at the NIST Gaithersburg Campus and remote
• Duration: this is expected to be a one-year position. Extensions are sometimes granted depending on the availability of funds.
• For questions related to the research project or the nature of the work in this position, please contact Dr. Barbara Bell Cuthil (barbara.cuthill@nist.gov). For questions related to the online application or NIST PREP more generally, please contact msu-nistprep@morgan.edu.

Privacy Act Statement

Authority: 15 U.S.C. § 278g-1(e)(1) and (e)(3) and 15 U.S.C. § 272(b) and (c)

Purpose: The National Institute for Standards and Technology (NIST) hosts the Professional Research Experience Program (PREP) which is designed to provide valuable laboratory experience and financial assistance to undergraduates, post-bachelor’s degree holders, graduate students, master’s degree holders, postdocs, and faculty.

PREP is a 5-year cooperative agreement between NIST laboratories and participating PREP Universities to establish a collaborative research relationship between NIST and U.S. institutions of higher education in the following disciplines including (but may not be limited to) biochemistry, biological sciences, chemistry, computer science, engineering, electronics, materials science, mathematics, nanoscale science, neutron science, physical science, physics, and statistics. This collection of information is needed to facilitate the administrative functions of the PREP Program.

Routine Uses: NIST will use the information collected to perform the requisite reviews of the applications to determine eligibility, and to meet programmatic requirements. Disclosure of this information is also subject to all the published routine uses as identified in the Privacy Act System of Records Notices: NIST-1: NIST Associates.

Disclosure: Furnishing this information is voluntary. When you submit the form, you are indicating your voluntary consent for NIST to use the information you submit for the purpose stated.