About this opportunity:
Join us for a Master's thesis exploring slopsquatting, a software supply chain attack in which AI coding assistants recommend non-existent software packages that attackers can register and exploit. You will investigate how this risk affects enterprise software development, particularly in package ecosystems such as npm and PyPI, and examine how secure dependency management and CI/CD controls can support safer AI-assisted development. The work will have direct relevance to Ericsson and other organisations adopting AI tools in software engineering.
What you will do:
You will conduct a literature review and perform controlled experiments with AI coding assistants to measure how frequently they suggest non-existent dependencies. You will assess the exposure of selected language models, analyse how phantom dependencies could enter enterprise development workflows, and evaluate the ability of existing security controls-such as dependency scanners and SBOM-based processes-to detect or prevent them. Based on your findings, you will propose practical mitigation measures, including dependency verification, improved developer guidance and DevSecOps controls. The empirical work will use public or synthetic data rather than confidential Ericsson code, and your findings will be documented in a thesis report and presented to relevant stakeholders.
The skills you bring:
- Background in computer science, cybersecurity, software engineering, artificial intelligence, machine learning or similar
- Good programming skills, preferably in Python or JavaScript, along with a basic understanding of AI, machine learning and large language models
- Knowledge of software supply chain security, secure development practices or CI/CD is beneficial
- Analytical, curious and research-oriented mind, with a proactive and independent approach to problem-solving
- Strong spoken and written English skills, together with the ability to communicate, document findings and collaborate effectively, are essential.
Why join Ericsson?At Ericsson, you'll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what's possible. To build solutions never seen before to some of the world's toughest problems. You'll be challenged, but you won't be alone. You'll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.
What happens once you apply? Click Here to find all you need to know about what our typical hiring process looks like.Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.
Primary country and city: Sweden (SE) || Stockholm
Req ID: 790993
Skills Required
- Background in computer science, cybersecurity, software engineering, artificial intelligence, machine learning, or a similar field
- Good programming skills
- Programming experience in Python or JavaScript
- Basic understanding of artificial intelligence, machine learning, and large language models
- Knowledge of software supply chain security, secure development practices, or CI/CD
- Analytical, curious, research-oriented, proactive, and independent approach to problem-solving
- Strong spoken and written English skills
- Ability to communicate, document findings, and collaborate effectively
What the Team is Saying
.png)
.png)
What We Do
Ericsson builds the digital connectivity the world relies on. Our technology underpins the mobile networks, platforms, and systems that billions of people, businesses, and societies depend on every day. We are a global leader in communications technology, delivering mobile network infrastructure, cloud software, and wireless connectivity solutions for service providers and enterprises worldwide. Our networks support connectivity across 180+ countries, helping power everyday communication as well as critical digital services at global scale. Connectivity has evolved far beyond consumer mobile use. Today, nearly 80% of the world’s population accesses the internet via mobile networks, and Ericsson is helping shape what comes next. We are advancing 5G and 5G Advanced, developing network APIs that open connectivity to the global developer ecosystem, and applying automation and AI to make networks more intelligent, efficient, and resilient. Ericsson was the first company to launch live 5G networks on five continents, and our 5G platform is now commercially live in 150+ networks across 60+ countries. We also support more than 36,000 enterprise customers, enabling secure, high-performance connectivity for industries such as manufacturing, aviation, logistics, utilities, and public safety, where reliability and performance are mission critical. Innovation is central to how we work. Ericsson has approximately 28,000 employees in research and development, backed by one of the strongest intellectual property portfolios in the industry with 60,000+ granted patents. Our engineers, researchers, and technologists work across 100+ global R&D sites, helping define how networks evolve and how digital infrastructure is built for the long term. As the world moves toward a mobile-first, AI-powered, and cloud-driven future, connectivity becomes the foundation for digital transformation across every industry. Ericsson is building that foundation, shaping the future of digital connectivity through technology that operates at global scale and supports real-world impact, today and for what comes next.
Why Work With Us
Ericsson is a place for people who want to work on technology that powers everyday life. You’ll contribute to large-scale systems used every day, tackle complex challenges in live environments, and keep developing your skills and career in your own vision.
Gallery
.jpg)
.jpg)
.jpg)
.jpg)
.jpg)
Ericsson Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Ericsson adopts a hybrid work model globally because we know balance matters. Sometimes things are better in real life. Other times we can be more productive at home. Our hybrid approach gives you the best of both worlds.
