AI-Driven CI/CD Vetting Research Grant (6 months)

Inesc Tec; Portugal; Sur place; EUR 11 000 - 13 000; Plein temps

Avantages offerts par ce poste

Health insurance

Résumé du poste

INESC TEC invites applications for a 6-month research grant in Computer Science, starting 15 December 2026. The project focuses on automated verification of CI/CD workflows and securing software supply chains using GitHub Actions, static analysis and LLMs. The grant includes health insurance and a monthly stipend.

The candidate will work within a multidisciplinary team, contributing to tooling integration, policy-based decisions and potential project renewal until end of the program.

Qualifications

• BSc Degree in Biomedical Engineering or BSc Degree in Informatics Engineering is required.
• Enrolment in higher education studies may be required for the grant.
• Experience with CI/CD pipelines and GitHub Actions is required.
• Experience with virtualization, containerization and provisioning tools such as Docker, Vagrant and Ansible.

Responsabilités

• Design and implement automated verification mechanisms for CI/CD workflows (Vetted Workflows) based on GitHub Actions.
• Integrate static analysis tools and explore LLM usage to detect risks not covered by tools.
• Define orchestration component that evaluates analyses and decides workflow execution using declarative policies.

Connaissances

LLMs and RAG

CI/CD & GitHub Actions

Virtualization & containerization

LLM-based recommendation systems

Formation

BSc in Biomedical Engineering

BSc in Informatics Engineering

Outils

GitHub Actions

Docker

Vagrant

Ansible

Description du poste

INESC TEC invites applications for a 6-month research grant in Computer Science, starting 15 December 2026. The project focuses on automated verification of CI/CD workflows and securing software supply chains using GitHub Actions, static analysis and LLMs. The grant includes health insurance and a monthly stipend.

The candidate will work within a multidisciplinary team, contributing to tooling integration, policy-based decisions and potential project renewal until end of the program.