The looming threat of cryptographically relevant quantum computers mandates a worldwide migration to post-quantum cryptography over the coming 5-10 years. Some new standards have been established already, but a lot of work is still needed for a successful migration, ranging from a wider portfolio of post-quantum secure primitives (both in functionality and footprint), increased confidence in the underlying assumptions through advanced cryptanalysis, improved implementations with high assurance (e.g. against microarchitectural or side-channel attacks), and integration of primitives in wider protocols and products. The successful applicant will be able to explore and contribute to these exciting research and development questions, with an opportunity to set their own research agenda. Specific research questions will be discussed with the successful applicant, so they can best complement current expertise. By developing and shaping your own research project, you can create a real-world im...