Master Thesis / Internship: Static Cryptography Scanner

ABOUT ELCA

We are ELCA, one of the largest Swiss IT tribes with over 2,000 experts. We are multicultural with offices in Switzerland, Spain, Italy, Vietnam, and Mauritius. Since 1968, our team of engineers, business analysts, infrastructure technicians, software architects, designers, and consultants provides tailor-made and standardized solutions to support the digital transformation of major public administrations and private companies in Switzerland. Our activity spans across multiple fields of leading-edge technologies such as Cloud, Modern Workplace, AI, BI/BD, RPA, Blockchain, IoT, and Cybersecurity.

Description
Software security is a critical concern for modern organizations, with cryptography playing a central role in protecting sensitive data and communications. As software portfolios grow, tracking the cryptographic methods used across projects becomes increasingly challenging yet essential for security compliance and risk management. This internship focuses on developing an automated solution to inventory cryptographic implementations across codebases.

Objectives

• Develop a static analysis tool that can scan repositories to identify and catalog cryptographic methods
• Implement pattern recognition using frameworks like Semgrep or similar static analysis tools
• Create a reporting system that provides clear visibility into cryptographic usage across projects
• Design the tool to identify potential security issues such as deprecated algorithms or weak key sizes
• Document findings and tool usage for future maintenance and expansion

Our Offer

• A dynamic work environment with security-focused professionals
• Opportunity to develop skills at the intersection of software engineering and cybersecurity
• Exposure to real-world applications of cryptography in various projects
• Good work-life balance with flexible work arrangements
• Collaborative team with regular knowledge-sharing sessions

Skills Required

• Programming knowledge
• Understanding of cryptographic concepts
• Ability to learn quickly and apply new concepts
• Experience in Software Engineering (can be personal projects)
• Fluent in German and English