Michel van Eeten

TU Delft is recruiting a postdoc for the THESEUS project on organizational cybersecurity and patch management . The project studies why organizations delay patching even critical vulnerabilities and how risk governance decisions around patching are made in practice. The postdoc will work with an interdisciplinary team and partner organizations such as KLM-AirFrance, Rijkswaterstaat, the City of Amsterdam, the City of The Hague, KPN, and the National Cyber Security Center. The research involves collecting and analyzing interviews, surveys, ticketing systems, and incident logs to understand the technical and social dimensions of patching security in organizations. Eligible backgrounds include social science , behavioural science , organisational science , information systems , telecommunications , or computer science , especially for candidates interested in the human and organizational side of cybersecurity. A PhD or equivalent is required. English is required; Dutch is a plus. The position is at Delft University of Technology in the Faculty of Technology, Policy and Management. The contract runs until 31 March 2028 and is 38–40 hours per week. Salary and benefits follow the Dutch university collective agreement. Additional benefits include pension, flexible working, leave hours, training opportunities, and partial paid parental leave. Apply online by 1 June 2026 . Submit a cover letter, CV, diploma and transcripts, and any additional materials such as thesis work or publications. Applications sent by email or post will not be considered.