> Markdown version of [/jobs/ext/1670936-job-offer](https://www.wearedevelopers.com/jobs/ext/1670936-job-offer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Job offer - **Company:** IMDEA Networks Institute - **Location:** Leganés, Spain - **Contract:** Temporary contract - **Skills:** JavaScript (Programming Language), Artificial Intelligence, Amazon Alexa, Data Analysis, Android Software Development, Static Program Analysis, Cyber Security, Mobile Application Software, Knowledge Management, Data Streaming, Web Crawlers, Privacy Controls, Large Language Models, Generative AI, Information Technology, IDA Pro, Reverse Engineering Software, Smart Tv - **Published:** July 31, 2026 - **Apply:** https://networks.imdea.org/job/phd-position-in-cross-platform-tracking-and-privacy-risks-in-llms/ ## About the Role Master Degree or equivalent Research Field Engineering » Communication engineering Education Level Master Degree or equivalent Skills/Qualifications The position requires: * a B.Sc. in Computer Science, Telecommunications Engineering or related field, with a solid academic record. Postgraduate studies (holding a M.Sc. or being currently enrolled in one) will be a plus. * Data analysis, modeling and applied ML experience is recommended, given the need to identify patterns in large-scale behavioral logs. * Software reverse engineering (Frida, IDA Pro) experience is recommended, especially in the area of mobile app analysis and JavaScript code analysis. * [Optional] Experience in LLMs. * [Optional] Experience in web crawling and JavaScript analysis. * [Optional] Experience in traffic and protocol analysis. * [Optional] Experience in mobile app analysis. * Fluency in written and spoken English, * Enthusiasm for interdisciplinary research with real-world impact. Languages ENGLISH, Computer science » OtherEngineering » Communication engineering ## Description The successful candidate will investigate how apps, websites, and devices collect, share, and synchronize user data across platforms-for example, through identifiers, cookies, fingerprinting, or covert communication channels. The goal is to uncover hidden tracking practices that operate across ecosystems (e.g., mobile, web, IoT, and smart TV environments) and to design scalable analysis and mitigation frameworks. The research will involve both empirical and methodological contributions: * Developing automated frameworks to detect and analyze cross-platform data flows using network measurements, static and dynamic app analysis, and large-scale testing infrastructures. * Studying deterministic and probabilistic tracking mechanisms (e.g., shared identifiers, IP correlation, fingerprinting (see [1]), or behavioral synchronization). * Investigating how tracking companies and SDKs operate across device and ecosystem boundaries. * Analyzing the privacy risks associated with the proliferation of Generative AI technologies in browsers, mobile platforms and beyond, as well as emerging platforms such as AR/VR. * Designing privacy-preserving countermeasures that balance usability, scalability, and effectiveness. This PhD project offers the opportunity to make fundamental contributions to an emerging research field with high societal, regulatory, and industrial relevance, while working at the intersection of cybersecurity, privacy, data analysis, and network measurement. In fact, the Ph.D. candidate's contributions will advance our ability to detect and understand how users are tracked across devices, apps, and ecosystems, providing empirical evidence and technical insights to shape privacy engineering and policy at a global scale, with a special focus on the privacy risks of LM-based architectures., Inquiries on the position can be directed to the thesis supervisor via email, Dr. Guillermo SUAREZ-TANGIL (guillermo.suarez-tangil "at" imdea.org) Additional comments Bibliographic References of Relevant Group Research Outputs (See Google Scholar for links to the articles): [1.] "In the Room Where It Happens: Characterizing Local Communication and Threats in Smart Homes." A. Girish, T. Hu, V. Prakash, D. J. Dubois, S. Matic, D. Huang, S. Egelman, J. Reardon, J. Tapiador, D. Choffnes, N. Vallina-Rodriguez In Proc. of the 2023 ACM on Internet Measurement Conference, 2023. [2.] SkillVet: Automated Traceability Analysis of Amazon Alexa Skills. J. Edu, X. Ferrer-Aran, J. Such, G. Suarez-Tangil. IEEE Trans. on Dependable and Secure Computing. 2022. [3.] "AI in the Gray: Exploring Moderation Policies in Dialogic Large Language Models vs. Human Answers in Controversial Topics." Vahid Ghafouri, Vibhor Agarwal, Yong Zhang, Nishanth Sastry, Jose Such, Guillermo Suarez-Tangil. 32nd ACM International Conference on Information and Knowledge Management (CIKM). [4.] Trouble over-the-air: An analysis of FOTA apps in the android ecosystem. Blázquez, E., Pastrana, S., Feal, Á., Gamba, J., Kotzias, P., Vallina-Rodriguez, N., & Tapiador, J. IEEE Symposium on Security and Privacy (SP) 2021 [5.] An Analysis of Pre-installed Android Software. J. Gamba, M. Rashed, A. Razaghpanah, J. Tapiador, N. Vallina-RodriguezIEEE Symposium on S&P'20 (BEST PRACTICAL PAPER AWARD, AEPD EMILIO ACED AWARD, CNIL-INRIA PRIVACY RESEARCH AWARD) [6.] Localhost tracking: https://localmess.github.io [7.] Your Signal, Their Data: An Empirical Privacy Analysis of Wireless-scanning SDKs in Android. Aniketh Girish, Joel Reardon, Juan Tapiador, Srdjan Matic, Narseo Vallina-Rodriguez. PETS Symposium 2025. [8.] 50 Ways to Leak Your Data: An Exploration of Apps' Circumvention of the Android Permissions Systems. J. Reardon, A. Feal, P. Wijesekera, A. Elazari Bar On, N. Vallina-Rodriguez, S. Egelman. USENIX Security, 2019 (USENIX'19 DISTINGUISHED PAPER AWARD, CNIL-INRIA PRIVACY RESEARCH AWARD, AEPD EMILIO ACED) [9.] Apps, Trackers, Privacy, and Regulators: A Global Study of the Mobile Tracking Ecosystem. Abbas Razaghpanah, Rishab Nithyanand, Narseo Vallina-Rodriguez, Srikanth Sundaresan, Mark Allman, Christian Kreibich, Phillipa Gill. NDSS Symposium 2018. [10.] "Won't somebody think of the children?" examining COPPA compliance at scale.Irwin Reyes, Primal Wijesekera, Joel Reardon, Amit Elazari Bar On, Abbas Razaghpanah, Narseo Vallina-Rodriguez, Serge Egelman. PETS Symposium 2018. CASPAR BOWDEN PRIVACY RESEARCH AWARD 2020. ## Related Videos - [Training Bots on Deliveroo Data, Alexa Can Swear and Mushroom Electronics - Julia Kordick](https://www.wearedevelopers.com/videos/1839-training-bots-on-deliveroo-data-alexa-can-swear-and-mushroom-electronics-julia-kordick) - [WeAreDevelopers LIVE - The Shape of SVG to Come!](https://www.wearedevelopers.com/videos/1938-wearedevelopers-live-the-shape-of-svg-to-come) - [Your next 10x engineer isn't in your city. Refactor accordingly.](https://www.wearedevelopers.com/videos/100103-your-next-10x-engineer-isn-t-in-your-city-refactor-accordingly) - [No touch. No gestures. Can you still build a Great UX?](https://www.wearedevelopers.com/videos/2087-no-touch-no-gestures-can-you-still-build-a-great-ux) - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) - [Coffee with Developers - Maria Apazoglou](https://www.wearedevelopers.com/videos/1209-coffee-with-developers-maria-apazoglou) ## Related Articles - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [7 Most Popular Web Developer Jobs in Europe](https://www.wearedevelopers.com/magazine/163-7-most-popular-web-developer-jobs-in-europe) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)