Internship / Master Thesis: Are we losing the war against bots? Let's re-invent the CAPTCHA shield

ELCA Informatique SA; Pully; Vor Ort; CHF 13.000 - 18.000; Vollzeit

Benefits dieser Stelle

International team

Applied research

Prototype opportunities

Practical recommendations

Zusammenfassung

SECUTIX is an innovative ticketing partner for sport and culture. In this 6-month internship or master thesis starting February 2027, you will help explore and develop anti-bot defences, investigating mobile-assisted verification, device signals, behavioural analysis and human-vs-bot challenges.

Work in an international team on practical cybersecurity research at the intersection of digital ticketing and AI, with a prototype in a real ticket-purchase flow and user-experience considerations.

Qualifikationen

• Web development knowledge and familiarity with APIs and client-server architectures.
• Strong interest in user experience: designing intuitive interactions and testing their usability with real users.
• Interest in cybersecurity, cryptography, authentication and automated abuse prevention.
• Mobile development knowledge (iOS or Android) is a plus.
• Ability to design experiments, analyse results and communicate clear technical recommendations.

Aufgaben

• Study ticket-buying bots and review CAPTCHA, bot-detection and identity-verification solutions on the market
• Devise innovative ways to block bots while letting human users through with minimal effort
• Compare mobile-assisted verification and other approaches for effectiveness, usability, privacy and accessibility
• Develop a prototype in a representative ticket-purchase flow
• Test bot resistance and user experience under peak demand

Kenntnisse

Web development

APIs & client-server

UX testing

Cybersecurity

Mobile development

Experiment design

Jobbeschreibung

Start date: February 2027 · Duration: 6 months

SECUTIX is an innovative ticketing partner for organisations in sport and culture. Its solutions support complex live event programmes, including Wimbledon and Major League Cricket. As the company grows internationally, it is expanding beyond ticketing technology to offer fully managed services, bringing together software and operational support for event organisers.

SECUTIX believes every fan should have a fair chance to secure a ticket. The reality is harsher: profit-driven operators target ticketing systems to buy tickets in bulk and resell them at inflated prices. AI and readily available botting tools, from residential IP proxies to CAPTCHA-solving services, are making bots harder to stop. The 2026 Thales Bad Bot Report estimates that bots accounted for over 53% of web traffic in 2025.

In this 6-month internship or master thesis starting in February 2027, you will help SECUTIX explore and develop new anti-bot defences, investigating mobile-assisted verification, device signals, behavioural analysis and innovative challenges that distinguish humans from bots. User experience is a core success criterion: protection must be effective without frustrating fans or making them abandon their purchase.

Your tasks

• Study ticket-buying bots and AI agents, and review CAPTCHA, bot-detection and identity-verification solutions on the market
• Devise innovative ways to block bots while letting human users through with minimal effort
• Compare mobile-assisted verification and other approaches for effectiveness, usability, privacy and accessibility
• Develop a prototype in a representative ticket-purchase flow
• Test bot resistance and user experience: false rejections, completion time, abandonment, satisfaction and performance under peak demand

What we offer

• A collaborative environment within an international team working on technology for live events
• An applied research topic at the intersection of cybersecurity, AI and digital ticketing
• The opportunity to prototype and evaluate solutions to a concrete challenge for fans and event organisers
• Experience turning experimental results into practical recommendations for a ticketing platform

About your profile

• Web development knowledge and familiarity with APIs and client-server architectures
• Strong interest in user experience: designing intuitive interactions and testing their usability with real users
• Interest in cybersecurity, cryptography, authentication and automated abuse prevention
• Mobile development knowledge (iOS or Android) is a plus
• Ability to design experiments, analyse results and communicate clear technical recommendations