PhD Position in Software Security University of Twente in Netherlands

The University of Twente invites applications for a PhD position in Software Security, focusing on automated techniques to analyse, exploit, and patch software vulnerabilities after their detection. The project aims to address the challenge posed by modern tools, such as fuzzers, which often detect more flaws than organizations can feasibly fix. By designing and developing holistic automated methods, the research will prioritize critical vulnerabilities, assess their causes and risks, and enable prompt, effective mitigation across entire infrastructures rather than isolated applications. This approach is intended to reduce costs and improve security outcomes.

The successful candidate will join the internationally recognized SCS group, renowned for its work in systems, AI, and data security. The group offers a collaborative and supportive environment, with freedom to pursue research interests and guidance from experienced supervisors. The PhD appointment is for four years, with expectations to publish in top-tier security conferences and develop open-source research prototypes. Opportunities for international exchange, conference participation, and visits to other institutes are available, enhancing both knowledge and professional network.

Applicants should be highly motivated, enthusiastic researchers with a passion for world-class research and real-world impact. A strong background in systems and software security, proficiency in C/C++ programming, and familiarity with fuzzing, static analysis, and symbolic execution are essential. Candidates must hold (or be about to complete) a MSc degree in computer science or a closely related field, with excellent grades. Additional requirements include independence, creativity, analytical and communication skills, curiosity, team spirit, and fluency in English.

The position offers a full-time contract for four years, with a qualifier in the first year. The University provides a dynamic ecosystem, competitive salary (ranging from €3,059 to €3,881 per month), holiday allowance (8%), end-of-year bonus (8.3%), a solid pension scheme, paid and unpaid parental leave, free access to campus sports facilities, and flexible work arrangements. Full-time employment includes generous leave hours and additional benefits. The Twente Graduate School will support your training and supervision plan, encouraging responsibility and independence while fostering collaboration.

The SCS group is part of the Twente University Centre for Cybersecurity Research (TUCCR), a public-private partnership dedicated to advancing cybersecurity and digital sovereignty. TUCCR combines technical, socio-economic, and ethical expertise, and is equipped with state-of-the-art infrastructure, including security labs and data lakes. SCS researchers regularly publish at leading conferences and contribute to major research projects, policy documents, and real-world applications.

The faculty of Electrical Engineering, Mathematics and Computer Science (EEMCS) at the University of Twente is committed to shaping the digital society through research and collaboration with industrial partners and international researchers. Its multidisciplinary research institutes, including Mesa+ Institute, TechMed Centre, and Digital Society Institute, provide a high-profile environment for impactful research.

To apply, submit your application via the University of Twente careers portal before March 27, 2026. Required documents include a detailed CV, motivation letter, and academic transcript. For further information, contact Dr. Andrea Continella at [email protected].