ph3PhD position in Cross-Platform Tracking and privacy risks in LLMs /h3 h3Cybersecurity Group /h3 h3Internet Analytics Group /h3 pDeadline for receipt of applications: August 14, :59 AoE (15 August 2026, 13:59h) /p pThe Cybersecurity ( and Internet Analytics Groups ( led by Dr. Guillermo Suarez-Tangil ( and Dr. Narseo Vallina-Rodriguez ( at IMDEA Networks Institute have a joint opening for one PhD student in the area of IoT Security and Privacy. /p pThe research will involve both bempirical and methodological contributions /b : /p ul liDeveloping automated frameworks to detect and analyze cross-platform data flows using bnetwork measurements, static and dynamic app analysis /b , and blarge-scale testing infrastructures /b . /li liStudying bdeterministic and probabilistic tracking mechanisms /b (e.g., shared identifiers, IP correlation, fingerprinting (see (1)), or behavioral synchronization). /li liInvestigating how btracking companies and SDKs /b operate across device and ecosystem boundaries. /li liDesigning bprivacy-preserving countermeasures /b that balance usability, scalability, and effectiveness. /li /ul pThis PhD project offers the opportunity to make bfundamental contributions /b to an emerging research field with bhigh societal, regulatory, and industrial relevance /b , while working at the intersection of bcybersecurity, privacy, data analysis, and network measurement /b . In fact, the Ph.D. candidate’s contributions will advance our ability to detect and understand bhow users are tracked across devices, apps, and ecosystems /b , providing empirical evidence and technical insights to shape bprivacy engineering and policy /b at a general scale, with a special focus on the privacy risks of LM-based architectures. /p h3The position offers: /h3 ul libFull-time paid position /b for up to 4 years, with competitive salary and benefits. /li liHands-on training in scalable software/firmware analysis and reverse engineering skills, and data analysis. /li liA unique opportunity to work in one of the most active research groups in the field of online privacy. /li liThe opportunity to explore a research problem with massive research,



societal and industrial impact (see the new EU Cyber Resilience Act) /li liA vibrant, collaborative, multi-cultural and English-speaking research environment. /li liA chance to live and work in bMadrid, Spain /b , a cosmopolitan city offering high quality of life, excellent public services, and rich cultural opportunities. /li liThe expectation to publish in btop-tier conferences and journals /b such as USENIX Security, PETS, NDSS, IMC, WWW or CCS. /li liExcellent prospects for a bcareer in academia, research labs, or the privacy-tech industry /b (11). /li /ul h3The position requires: /h3 ul lia B.Sc. in Computer Science, Telecommunications Engineering or related field, with a solid academic record. Postgraduate studies (holding a M.Sc. or being currently enrolled in one) will be a plus. /li liData analysis, modeling and applied ML experience is recommended, given the need to identify patterns in large-scale behavioral logs. /li li(Optional) Experience in LLMs. /li li(Optional) Experience in traffic and protocol analysis. /li li(Optional) Experience in mobile app analysis. /li liFluency in written and spoken English, /li liEnthusiasm for interdisciplinary research with real-world impact. /li /ul pBibliographic References of Relevant Group Research Outputs (See Google Scholar for links to the articles): /p pb(1.) “In the Room Where It Happens: Characterizing Local Communication and Threats in Smart Homes.” A /b . Girish, T. Hu, V. Prakash, D. J. Dubois, S. Matic, D. Huang, S. Egelman, J. Reardon, J. Tapiador, D. Choffnes, N. Vallina-Rodriguez In Proc. of the 2023 ACM on Internet Measurement Conference , 2023. /p pb(2.) /bbSkillVet: Automated Traceability Analysis of Amazon Alexa Skills. /b J. Edu, X. Ferrer-Aran, J. Such, bG. Suarez-Tangil /b . IEEE Trans. on Dependable and Secure Computing. 2022. /p pb(3.) “AI in the Gray:



Exploring Moderation Policies in Dialogic Large Language Models vs. Human Answers in Controversial Topics.” /bVahid Ghafouri, Vibhor Agarwal, Yong Zhang, Nishanth Sastry, Jose Such, Guillermo Suarez-Tangil. 32nd ACM International Conference on Information and Knowledge Management (CIKM). /p pb(4.) Trouble over-the-air: An analysis of FOTA apps in the android ecosystem. /bBlázquez, E., Pastrana, S., Feal, Á., Gamba, J., Kotzias, P., bVallina-Rodriguez, N. /b , Tapiador, J. bIEEE Symposium on Security and Privacy (SP) /b 2021 /p pb(5.) An Analysis of Pre-installed Android Software. /bJ. Gamba, M. Rashed, A. Razaghpanah, J. Tapiador, bN. Vallina-Rodriguez /b IEEE Symposium on SP’20 ( bBEST PRACTICAL PAPER AWARD, AEPD EMILIO ACED AWARD, CNIL-INRIA PRIVACY RESEARCH AWARD /b ) /p pb(8.) 50 Ways to Leak Your Data: An Exploration of Apps’ Circumvention of the Android Permissions Systems. /bJ. Reardon, A. Feal, P. Wijesekera, A. Elazari Bar On, bN. Vallina-Rodriguez /b , S. Egelman. IEEE Security, 2019 ( bUSENIX’19 DISTINGUISHED PAPER AWARD, CNIL-INRIA PRIVACY RESEARCH AWARD, AEPD EMILIO ACED /b ) /p pThis position could be co-financed by the project “REAL-PETS. Empirical Detection Methods and Privacy-Enhancing Technologies for Real-World Tracking” (Grant Agreement number ), funded by the European Union and the European Cybersecurity Competence Centre through Horizon Europe program call HORIZON-CL -CS-ECCC-03. /p pIMDEA Networks Institute aims to increase the proportion of women and therefore qualified female applicants are explicitly encouraged to apply. Until a balanced ratio of men and women has been achieved at the institute, preference will be given to women if applicants have similar qualifications. IMDEA Networks Institute actively promotes diversity and equal opportunities. Applicants are not to be discriminated against in personnel selection procedures on the grounds of gender, ethnicity, religion or ideology, age, sexual orientation (anti-discrimination). People with disabilities who have the relevant qualifications are expressly invited to apply /p /p #J-18808-Ljbffr

📌 PhD position in Cross-Platform Tracking and privacy risks in LLMs (Madrid)
🏢 Fundación Imdea Networks
📍 Madrid