Post-Doctoral Research Visit F/M Postdoctoral position in web security, privacy, and online tracking

Contract type : Fixed-term contract

Level of qualifications required : PhD or equivalent

Fonction : Post-Doctoral Research Visit

Created in 2008, the Inria center at the University of Lille employs 360 people, including 305 scientists in 16 research teams. Recognized for its strong involvement in the socio-economic development of the Hauts-De-France region, the Inria center at the University of Lille maintains a close relationship with large companies and SMEs. By fostering synergies between researchers and industry, Inria contributes to the transfer of skills and expertise in the field of digital technologies, and provides access to the best of European and international research for the benefit of innovation and businesses, particularly in the region.

For over 10 years, the Inria center at the University of Lille has been at the heart of Lille's university and scientific ecosystem, as well as at the heart of Frenchtech, with a technology showroom based on avenue de Bretagne in Lille, on the EuraTechnologies site of economic excellence dedicated to information and communication technologies (ICT).

The modern web is undergoing a massive shift with the rise of AI and the evolution of browsers and operating systems. As third-party cookies were being phased out between 2020 and 2025, the ad ecosystem evolved and launched sophisticated and opaque tracking techniques (e.g., server-side tracking, identity graphs...). Simultaneously, the development of AI and LLM is having a tremendous impact on the web by modifying its structure to better suit web agents while also integrating AI tools directly inside users' browsers. These rapid shifts and changes introduce new privacy attack vectors and security challenges and demand adequate analysis to better protect users. The postdoctoral student will help investigate this subject as part of the PEPR Cybersecurity REV project.

We are seeking a highly motivated postdoctoral researcher to explore the boundaries of web privacy and security. The candidate will contribute to one or more of the following areas:

• Analysis and measurements of advanced online tracking techniques (e.g., SST, identity graphs, first-party cookies, user ID detection)
• Analyzing the security and privacy implications of AI-integrated browsing (e.g., prompt injection in browser agents, data leakage via LLM side-channels).
• Understanding the shift to AI-first web (e.g., perform measurements on how the web evolves to accomodate AI tools).
• Design of defensive mechanisms to better protecter users against a rising number of threats.

Qualifications
- PhD in Computer Science (Security, Privacy, or Web Systems).
- Good track record of publications in top-tier venues (A or A* conferences strongly recommended).
- Technical Proficiency: Great understanding of the Web stack (JS engines, HTTP, browser APIs). Experience with crawling tools (Playwright, Puppeteer) and data analysis is optional but very strongly recommended.
- Communication: Fluency in English (French is not required).

• Subsidized meals
• Partial reimbursement of public transport costs
• Leave: 7 weeks of annual leave + 10 extra days off due to RTT (statutory reduction in working hours) + possibility of exceptional leave (sick children, moving home, etc.)
• Possibility of teleworking (after 6 months of employment) and flexible organization of working hours
• Professional equipment available (videoconferencing, loan of computer equipment, etc.)
• Social, cultural and sports events and activities
• Access to vocational training
• Social security coverage

2 788 € Gross Monthly Salary

General Information

• Theme/Domain : Security and Confidentiality
  Web development (BAP E)
• Town/city : Villeneuve d'Ascq
• Inria Center : Centre Inria de l'Université de Lille
• Starting date : 2026-11-01
• Duration of contract : 1 year, 11 months
• Deadline to apply : 2026-10-31

Instruction to apply

Defence Security :
This position is likely to be situated in a restricted area (ZRR), as defined in Decree No. 2011-1425 relating to the protection of national scientific and technical potential (PPST).Authorisation to enter an area is granted by the director of the unit, following a favourable Ministerial decision, as defined in the decree of 3 July 2012 relating to the PPST. An unfavourable Ministerial decision in respect of a position situated in a ZRR would result in the cancellation of the appointment.

Recruitment Policy :
As part of its diversity policy, all Inria positions are accessible to people with disabilities.

Contacts

• Inria Team : SPIRALS
• Recruiter :
  Laperdrix Pierre / [email protected]

About Inria

Inria, the French national institute for research in digital science and technology, supports the French government in national research and innovation strategies in the digital field, acting as Digital Programs Agency. Inria leads over 300 research and innovation projects with its 3,500 scientists, engineers, and support staff, in partnership with universities and the digital ecosystem (businesses, entrepreneurs, and public stakeholders). Together, we explore strategic fields such as artificial intelligence, cybersecurity, quantum computing, cloud technologies, digital transformation in healthcare, digital twins, and digital technologies for defence. We develop practical solutions such as software, tech startups, partnerships with national companies, and cutting-edge training programmes. Our goal is to drive scientific, technological, and industrial excellence to ensure France’s digital sovereignty.