PhD in Software Security

Applications are now open for an exciting PhD position in software systems and security at the IMDEA Software Institute, located in Madrid, Spain.

Under the guidance of Dr. Georgios Portokalidis, the selected candidate will contribute to advancing software security and the resilience of software supply chains. Research areas may include:

Offensive security and vulnerability research – Discovering novel exploitation techniques and identifying previously unknown security flaws in software systems.
Vulnerability mitigation – Understanding and mitigating security vulnerabilities.
Software hardening through instrumentation – Enhancing security via runtime protections.
Application analysis and reverse engineering – Developing techniques for understanding and securing software.
Co-designing software and hardware for security – Exploring integrated approaches to security at multiple levels.
Transitioning from C/C++ to Rust – Investigating secure programming methodologies, potentially leveraging machine learning or AI-assisted tools.

This position offers an opportunity to work at the forefront of software security research, with the potential for impactful contributions to both academia and industry.

Who should apply?

We are seeking candidates who have completed (or are close to completing) a Master’s degree in Computer Science or a related discipline, demonstrating a deep commitment to research, a fervent interest in software engineering and computer security, proficiency in coding, and some prior experience and enthusiasm in at least one of the aforementioned areas.

Applicants must possess strong programming and tool-building skills, with experience developing software in C/C++, a solid understanding of software exploitation, good grasp of operating systems fundamentals, Linux familiarity, and a basic grasp of computer architectures like x86-64 and Aarch64. Experience with compiler toolchains, like Clang/LLVM, and Rust is preferable. Proficiency in English, both spoken and written, is essential.

Working at IMDEA Software

Ranked among Europe’s top research institutes in Computer Security, the IMDEA Software Institute offers a dynamic and inspiring research environment nestled within the Montegancedo Science and Technology Park. Set against the backdrop of Madrid’s vibrant cityscape, the institute provides an internationally competitive stipend, access to excellent public healthcare, unemployment benefits, retirement benefits, and support for research-related travel. English is the primary working language, and knowledge of Spanish is not required.

Dates

The position will span the entire duration of the doctoral studies, with an ideal start date of 15th of September 2025, offering some flexibility to accommodate individual circumstances.

The application deadline is April 29th, 2025. Review of applications will commence immediately and continue until the position(s) are filled.

How to apply?

Applicants interested in the position should submit their application at https://careers.software.imdea.org/ by selecting the option PhD Student and using reference code 2025-03-phd-syssec.

The recruitment process will comply with the IMDEA Software Institute’s OTM-R Policy.

For any inquiries regarding these positions, please reach out directly to Georgios Portokalidis ().