Summary
The Faculty of Science at the University of Amsterdam invites applications for a fully funded PhD position in AI and Hardware Security with the Parallel Computing Systems (PCS) research group. This four‑year position focuses on identifying and mitigating security vulnerabilities across AI systems — from algorithms and software to physical hardware — and includes hands‑on experiments in a hardware lab, publication expectations and some teaching duties.
Designation
PhD Candidate (Full‑time, 38 hours/week)
Key Details
| Reference | 15552 |
|---|---|
| Faculty | Faculty of Science — Informatics Institute (IvI) |
| Research Group | Parallel Computing Systems (PCS) |
| Contract | Temporary, up to 4 years (initial 18 months, extendable) |
| Salary | €3,204 – €4,051 gross per month (scale P) + 8% holiday allowance + 8.3% year‑end allowance |
| Working hours | 38 hours per week |
| Location | Amsterdam, The Netherlands |
| Closing date | 25 October 2026 |
Research Area
AI and Hardware Security: The project investigates security weaknesses across the full AI stack — adversarial attacks, model extraction and backdoors at the algorithmic/software level, and side‑channel and fault injection attacks on AI accelerators (NPUs, GPUs, other AI chips). The aim is to develop hardware‑aware, efficient and practical countermeasures validated on real devices.
Location
University of Amsterdam, Faculty of Science — Informatics Institute, Amsterdam, The Netherlands. The position is hosted within the PCS research group and provides access to a hardware laboratory and close supervision.
Eligibility / Qualification
- MSc (or equivalent) in Computer Science, Electrical Engineering or a closely related discipline.
- Strong background or clear interest in one or more of: machine learning/AI, computer security, or hardware design/embedded systems.
- Demonstrated research potential (e.g., Master thesis, publications or equivalent project work).
- Ability and willingness to develop cross‑disciplinary expertise and collaborate with other researchers.
- Professional command of English and good presentation skills.
Scholarship Description
This PhD position combines experimental and theoretical research to secure AI systems. You will explore how vulnerabilities in one layer of the AI stack can be exploited through another, design and implement realistic attacks and build practical defenses that are low overhead and deployable.
Core responsibilities include:
- Designing and executing security evaluations (model extraction, adversarial examples, backdoors, fault injection, side‑channel analysis) on AI platforms including NPUs and GPUs.
- Studying interactions between algorithmic, software and hardware vulnerabilities and building explanatory models and tools.
- Designing hardware‑aware countermeasures and validating them experimentally in the hardware lab.
- Publishing in international conferences and journals and completing a PhD thesis within four years.
- Presenting results at international meetings and helping establish collaborations with academic and industrial partners.
- Contributing to teaching and supervision (approximately 10% of working time).
Terms and benefits: the appointment follows the Collective Labour Agreement for Dutch universities, includes pension contributions, and may be eligible for the 30% tax ruling for qualifying non‑Dutch applicants. An educational plan and opportunities for career development, training and conference travel are provided.
How to Apply
Apply online through the official vacancy page. Only complete applications submitted via the application link will be considered.
Required application materials (submit all files except your CV in one single PDF):
- Detailed CV (include months for education and employment).
- Letter of motivation explaining your interest and fit for the project.
- Names and email addresses of two referees who can provide letters of recommendation.
A knowledge security check may be part of the selection procedure in accordance with national guidelines.
Contact for questions: Zhuoran Liu, Assistant Professor — z.liu@uva.nl
Apply online: https://werkenbij.uva.nl/en/vacancies/phd-candidate-in-ai-and-hardware-security-netherlands-15552/apply
Last Date to Apply
25 October 2026 (applications accepted until and including this date).
Notes
The University of Amsterdam is an equal opportunities employer and encourages applicants from underrepresented groups to apply. If you meet the educational requirements but not every listed qualification, you are still encouraged to submit an application.
