Doctoral student in machine learning for cyber security
KTH Royal Institute of Technology

Doctoral student in machine learning for cyber security

Sweden 03 Mar 2021


KTH Royal Institute of Technology
Visit institution page


State University
Host Country
03 Mar 2021
Study level
Opportunity type
Eligible Countries
This opportunity is destined for all countries
Eligible Region
All Regions

KTH Royal Institute of Technology in Stockholm has grown to become one of Europe’s leading technical and engineering universities, as well as a key centre of intellectual talent and innovation. We are Sweden’s largest technical research and learning institution and home to students, researchers and faculty from around the world. Our research and education covers a wide area including natural sciences and all branches of engineering, as well as architecture, industrial management, urban planning, history and philosophy.

Project description

Third-cycle subject:Computer science

Supervision: The doctoral student will be supervised by Pontus Johnson, KTH, Rolf Stadler, KTH, and Teodor Sommestad, FOI.

Society's critical infrastructure – the electric power system, telecommunications, water distribution, etc. – are to a large extent controlled by industrial IT systems. It is important to protect these systems from attacks from malicious actors. A Security Operations Centers (SOC), which collects large amounts of data generated by the industrial IT systems in order to detect, respond to, or to alert human operators of the presence of cyber attacks, may act as an important defense.

In order to achieve this, it is necessary to in real-time detect cyber intrusions, to respond to security incidents, to hunt for threats in the environment and to gather threat intelligence. This presents a number of exciting research challenges for machine learning and more in general for artificial intelligence. The present doctoral project is part of a new research project between KTH and the Swedish Defence Research Agency (FOI) aiming to develop a semi-autonomous SOC with the capability to plan for and respond to cyber attacks against industrial IT systems.

We are looking for motivated students who are eager to push the frontiers of machine learning and artificial intelligence for their application to SOC.

What we offer


To be admitted to postgraduate education (Chapter 7, 39 § Swedish Higher Education Ordinance), the applicant must have basic eligibility in accordance with either of the following:


In order to succeed as a doctoral student at KTH you need to be goal oriented and persevering in your work. During the selection process, candidates will be assessed upon their ability to:

As the position may include security-sensitive tasks, the results of a protective security analysis of the applicant may constitute a selection criteria. A check of criminal records may be performed during the recruitment process.

After the qualification requirements, great emphasis will be placed on personal qualities and personal suitability.

After the qualification requirements, great emphasis will be placed on personal qualities and personal suitability.

Target degree: PhD degree

Information regarding admission and employment

Only those admitted to postgraduate education may be employed as a doctoral student. The total length of employment may not be longer than what corresponds to full-time doctoral education in four years ' time. An employed doctoral student can, to a limited extent (maximum 20%), perform certain tasks within their role, e.g. training and administration. A new position as a doctoral student is for a maximum of one year, and then the employment may be renewed for a maximum of two years at a time.

Union representatives

You will find contact information for union representatives on KTH's website.

Doctoral section (Students’ union on KTH Royal Institute of Technology)

You will find contact information for doctoral section on the section's website.


Apply for the position and admission through KTH's recruitment system. It is the applicant’s responsibility to ensure that the application is complete in accordance with the instructions in the advertisement.

Applications must be received at the last closing date at midnight, CET/CEST (Central European Time/entral European Summer Time).

Applications must include the following elements:

Other information

Striving towards gender equality, diversity and equal conditions is both a question of quality for KTH and a given part of our values.

For information about processing of personal data in the recruitment process please read here.

We firmly decline all contact with staffing and recruitment agencies and job ad salespersons.

Disclaimer: In case of discrepancy between the Swedish original and the English translation of the job announcement, the Swedish version takes precedence.



Type of employment: Contract type: First day of employment: Salary: Number of positions: Working hours: City: County: Country: Reference number: Contact: Published: Last application date:

Choose your study destination

Choose the country you wish to travel to study for free, work or volunteer

Please find also