PhD position in Cross-Platform Tracking and Privacy Risks in LLMs IMDEA Networks Institute in Spain

PhD opportunity at IMDEA Networks Institute, Spain

The Cybersecurity Group and the Internet Analytics Group at IMDEA Networks Institute are offering a PhD position focused on cross-platform tracking, IoT security and privacy, and privacy risks in large language model (LLM)-enabled environments. The project is jointly led by Dr. Guillermo Suarez-Tangil and Dr. Narseo Vallina-Rodriguez.

The research aims to understand how apps, websites, and devices collect, share, and synchronize user data across ecosystems such as mobile, web, IoT, smart TV, and emerging AR/VR platforms. The successful candidate will investigate identifiers, cookies, fingerprinting, behavioral synchronization, and covert communication channels, with the broader goal of uncovering hidden tracking practices and designing scalable analysis and mitigation frameworks.

Planned work includes automated frameworks for detecting and analyzing cross-platform data flows, using network measurements, static and dynamic app analysis, and large-scale testing infrastructures. The project also covers deterministic and probabilistic tracking mechanisms, the role of tracking companies and SDKs across device boundaries, and the privacy implications of generative AI technologies in browsers, mobile platforms, and other systems. A key objective is to develop privacy-preserving countermeasures that balance usability, scalability, and effectiveness.

This is a full-time paid PhD position for up to 4 years, with competitive salary and benefits. It is embedded in a highly active research environment with strong expertise in online privacy, cybersecurity, and network measurement. The group’s publication record includes leading venues such as USENIX Security, PETS, NDSS, IMC, WWW, and CCS, and the position offers training in software/firmware analysis, reverse engineering, and data analysis.

Eligibility highlights: applicants should have a B.Sc. in Computer Science, Telecommunications Engineering, or a related field with a solid academic record. An M.Sc. or current enrollment in a master’s programme is considered a plus. Helpful skills include data analysis, modeling, applied machine learning, reverse engineering tools such as Frida and IDA Pro, web crawling, JavaScript analysis, traffic and protocol analysis, and mobile app analysis. Fluency in written and spoken English is required.

Application: candidates must apply through the IMDEA Networks hiring portal and submit a CV, a motivation letter, and contact details for two references. Applicants should explicitly select Dr. Suarez-Tangil in the application. The deadline is 15 August 2026 at 13:59 (Europe/Madrid).

Location: IMDEA Networks Institute, Leganés (Madrid), Spain.

Funding note: the position could be co-financed by the EU Horizon Europe project REAL-PETS (Grant Agreement 101309318).