51 software-formal-method-phd "DIFFER" research jobs