Skip directly to content

Masterand / Bachelorand (m/f/d) - Thesis: Secure Pre-Boot Recovery for LUKS-Encrypted Edge Systems

People at AP Sensing | Careers & Work Environment

Reference 768G

Your New Career

You become part of a global team developing distributed fiber optic sensing solutions that help optimize critical infrastructure, protect people, and safeguard the environment. Using fiber optic cables as continuous sensors, we combine advanced photonics, measurement technology, and modern software to deliver reliable real-time insights along pipelines, power cables, railways, and other assets. In this role, you contribute to solutions deployed worldwide, working in a collaborative, cross-disciplinary engineering environment that values technical rigor, long-term quality, and practical innovation.

Your Responsibilities

  • You design a secure recovery concept for Secure Boot Linux systems with LUKS2-encrypted disks.
  • You analyze the threat model around physical recovery access, USB devices, TPMs, Secure Boot, and LUKS unlock flows.
  • You design and prototype a USB-based recovery token with a secure device identity, limited-use lifecycle, and observable states.
  • You investigate mutual authentication between a USB token and the Linux initramfs.
  • You evaluate approaches such as HID-based legacy compatibility, a vendor-specific USB protocol, TPM-bound device identities, and secure elements.
  • You develop a demonstrator and validate it against defined attack, fault, and recovery scenarios.
  • You document the architecture, security assumptions, limitations, and results in a clear and reproducible way.

Your Profile

  • You are studying computer science, embedded systems, IT security, electrical engineering, or a related subject.
  • You are interested in Linux, embedded systems, systems security, or trusted hardware.
  • You have initial experience with C, C++, Rust, Python, or a comparable language.
  • Familiarity with Linux boot processes, LUKS/dm-crypt, TPM 2.0, Secure Boot, USB, or microcontrollers is helpful but not required in full.
  • You work systematically, challenge security assumptions, and enjoy investigating technical systems experimentally.
  • You can document and communicate results clearly.

Our Company

At AP Sensing, we’re building on a success story that began in the garage of Bill Hewlett and Dave Packard. As an independent HP spin-off, we combine over 40 years of technological expertise with a passion for innovation.

Together we’ll continue to enhance infrastructure, protect people, and safeguard our planet. With a commitment to fiber optic sensing, we value every voice and empower growth. Join us in thinking ahead to create a smarter, safer world.

Our Offer

Flexibility

  • Flexible working hours that are compatible with your studies

Experience

  • Gain hands-on experience in data science and work on technology that enhances security.

Team

  • Team spirit: A motivated and friendly team that supports and encourages you

Location

  • Only a 2-minute walk from the S-Bahn station with a direct connection to Stuttgart

Office Space

  • You will work on site in large, bright and air-conditioned offices with height-adjustable desks and a fully equipped kitchen with a high-tech coffee machine

Are you ready to play a big role in a small team, instead of a small role in a big team?

Then you are spot-on with us

Got questions? Call Ingrid Licht at +49 7031 309 6619 or email hr@apsensing.com. We’re happy to help! Ready to apply? Send your application to hr@apsensing.com.

My Downloads

There are no documents in the download folder yet.

Use the to add new documents.

Your download has started.

Downloads

After you provide your details, we will send you the data selection digitally.