Kerja Sepenuh Masa Cybersecurity and Infrastructure Engineer, Gaji tinggi SGD 5,000 di IMPERIAL RESEARCH AND INNOVATION SINGAPORE LTD. Central Region (Singapore) - Maukerja

Research Programme

Our mission is simple to summarise: make Singapore’s healthcare ecosystem measurably harder to attack. We are looking for talented and driven people who will work with us on this mission by building the tools, platforms and infrastructure that let us find real weaknesses, build real defences and see them through to fixes that protect patients, hospitals, and the devices they depend on.

Imperial College London and Nanyang Technological University (NTU) are seeking a hands-on Cybersecurity Engineer to join IN-CYPHER (Imperial/NTU CYber Protection for HEalthcaRe). IN-CYPHER is a UK–Singapore research programme on the security of connected medical devices and healthcare systems, based at Imperial Global Singapore (IGS).

Purpose of the Post

Connected medical devices often stay in service for 10–20 years, are hard to patch, and sit inside complex hospital networks. Securing them takes more than ideas. It takes working tooling, realistic environments to test against, and demonstrators that convince clinicians, manufacturers and regulators. We want engineers who build these things, automate wherever they can, and turn early-stage research prototypes into robust, usable software that makes a real difference.

We welcome candidates whose engineering strengths lie in any of the following areas:

• Red team tooling: offensive tools, fuzzers, exploitation frameworks, protocol analysers, and automated penetration-testing pipelines.

• Blue team tooling: detection pipelines, network monitoring, intrusion and anomaly detection systems, log and telemetry infrastructure, and automated alerting and incident response.

• Yellow team infrastructure: the environments others attack and defend, such as cyber ranges, hospital-network testbeds, vulnerable-by-design systems, and device emulation and simulation platforms. This also covers the systems underneath them: administering and hardening Linux servers, GPU compute, storage, self-hosted services and mixed-OS systems, and automating their provisioning, patching, access management, backups and monitoring.

Prior medical-domain experience is welcome but not required. You will work closely with researchers and with clinical and engineering partners at Imperial, NTU, the Lee Kong Chian School of Medicine, and Imperial College Healthcare NHS Trust.

Candidates will be employed by Imperial Global Singapore, a research division of Imperial College London, which is consistently ranked within the top 10 of the QS University Rankings.

The position is based at the Imperial Global Singapore office located in the CREATE building on the NUS campus. The Cybersecurity Engineer will join a vibrant cross-faculty interdisciplinary research environment currently hosting approximately 30 researchers working across 5 major programmes.

Key Responsibilities

Main Duties
• Design, build, and maintain security tooling, platforms, and libraries that support offensive and defensive research on connected medical devices and healthcare networks.

• Build and operate the programme’s attack/defence infrastructure, such as a medical-device cyber range, hospital-network testbeds, and device emulation environments.

• Translate research prototypes into robust, documented, and usable software, in collaboration with researchers and with scientific, clinical, and translation partners.

• Develop engaging and interactive demonstrators that communicate the programme’s findings and impact to clinical, industry, regulatory, and public audiences.

• Drive engineering outputs through to concrete protective impact in Singapore’s healthcare sector, such as deployed detection tooling, released open-source tools, and infrastructure adopted by partners.

• Support security assessments, penetration tests, and vulnerability research on medical devices, protocols, and hospital-like systems, following responsible-disclosure practice.

• Contribute to the administration, hardening, and monitoring of the programme’s computing infrastructure, including Linux and GPU servers, storage, self-hosted services, and mixed-OS systems.

• Identify manual, repetitive, or error-prone processes in engineering and operations, and automate or streamline them using scripting, configuration management, infrastructure-as-code, and CI/CD.

• Liaise with the IT teams of Imperial and partner institutions on integration, networking, and compliance with institutional IT and data-protection policies.

• Keep abreast of security engineering developments and best practices, both theoretically (by following relevant standards and threat landscapes) and practically (by maintaining hands-on experience with relevant languages, frameworks, and tools).

• Maintain high-quality documentation of your work so that it can be used directly in other documents, such as reports, academic publications, or grant applications.

• Proactively support publications in high-quality refereed venues, and present work to colleagues and at national/international conferences.

• Develop contacts and collaborations within IGS, Imperial, NTU, and the wider community.

• Promote the positive reputation of IGS and the IN-CYPHER Programme.

• Contribute to programme activities and the smooth running of IN-CYPHER and other programmes under IGS.

• Assist in the supervision of undergraduate interns, postgraduate research students, and research assistants as required.

• Maintain organised, accurate records and the highest standards of integrity and confidentiality.

• Comply with IGS and CREATE practices and attend safety courses where appropriate.

• Any other duties as may be deemed reasonable by scientific and operations managers of IGS, IN-CYPHER, and scientific investigators of the relevant Themes.

Other Duties

Undertake any necessary training and/or development

Undertake appropriate administration tasks

Attend relevant meetings

Observe and comply with all IGS policies and regulations, including the key policies and procedures on:

• Confidentiality

• Conflict of Interest

• Business Continuity

• Data Protection

• Equal Opportunities

• Ethics related to scientific conduct and to considerations of patient data, where appropriate

• External Interests

• Financial Regulations

• Health and Safety

• Use of Information Technology

• Policies regarding smoking and e-cigarettes

Undertake specific safety responsibilities relevant to individual roles, as set out by IGS

Person Specification
Requirements

Candidates/post holders will be expected to demonstrate the following: Essential (E) / Desirable (D)

Education

A good relevant undergraduate degree (or equivalent industrial experience), for example in Computer Science, Electrical/Electronic Engineering, or similar. (E)

A relevant Master’s degree or equivalent research or industry experience. (D)

Knowledge & Experience

Solid understanding of attack techniques and defensive controls across network, system, and application layers, for example MITRE ATT&CK. (E)

Fluency in at least one language used for security tooling and automation, such as Python, Go, C, or Rust. (E)

Knowledge of software engineering best practice, including version control, testing, CI/CD, and containers. (E)

A demonstrable, verifiable track record of building security tooling or infrastructure in at least one of the following, for example through public repositories, released tools, or deployed systems: (E)

• Red team: offensive tools, fuzzers, exploitation or scanning frameworks, or penetration-testing automation.

• Blue team: detection tools, rulesets, monitoring or SIEM pipelines, or incident-response tooling.

• Yellow team: testbeds, cyber ranges, emulation environments, or other attack/defence infrastructure.

Practical experience of software or systems engineering in a production or research environment. (E)

Practical experience in network security, including protocol analysis, traffic capture, and network-level attack or defence. (E)

Experience in the analysis, interpretation, and visualisation of data, for example network traffic or security telemetry. (E)

Linux system administration, virtualisation, and networking skills, for example KVM/QEMU, Proxmox, Docker, VLANs, firewalls, and VPNs. (D)

Experience with infrastructure automation and configuration management, for example Ansible, Terraform, or NixOS. (D)

Experience running GPU/HPC servers, storage and backup systems, identity systems (LDAP, SSO, Active Directory), or monitoring stacks (e.g. Prometheus, Grafana, ELK, Wazuh). (D)

Reported CVEs, published exploits/PoCs, or bug-bounty disclosures. (D)

Experience building interactive demonstrators, dashboards, or front-ends, for example web or full-stack development. (D)

Experience with medical devices or healthcare systems, for example HL7 FHIR, DICOM, BLE/wireless medical devices, or hospital IT environments. (D)

Knowledge of embedded, IoT, or wireless systems and their security, or of ML-based anomaly detection. (D)

Industrial security or engineering experience, such as consultancy, a red team, a SOC, a security product team, or IT operations. (D)

Relevant certifications, such as OSCP, OSEP, OSWE, CRTO, GIAC, RHCSA, or LFCS. (D)

Familiarity with security standards and regulation, such as CIS Benchmarks, ISO 27001, NIST SP 800-53/800-30, IEC 62443, IEC 81001-5-1, ISO 14971, or medical-device cybersecurity guidance. (D)

Authorship of peer-reviewed articles, conference or practitioner talks, or widely read technical blog posts. (D)

Experience supervising or mentoring students or interns. (D)

Skills & Abilities

Ability to quickly learn new technologies, develop and apply new concepts, and solve problems creatively. (E)

An automation-first mindset, with the ability to spot inefficiencies and design pragmatic, maintainable improvements. (E)

Ability to troubleshoot problems systematically across hardware, OS, network, and application layers. (E)

Excellent written and verbal communication, including clear technical documentation and the ability to explain complex systems to non-specialist audiences. (E)

Ability to organise and prioritise own work with minimal supervision and against deadlines. (E)

Ability to collaborate within a large, distributed, interdisciplinary team, potentially across time zones. (E)

Unquestionable integrity and commitment to ethical and legal conduct in security work, including responsible disclosure. (E)

Discipline and regard for confidentiality and security at all times. (E)

Willingness to work as part of a team, to be open-minded and cooperative, and to undertake any necessary training for the role. (E)

A flexible attitude towards work. (E)

Willingness to travel within Singapore, to the United Kingdom, and to other destinations as required to conduct and disseminate work. (D)

Willingness to work outside normal working hours (including weekends) for planned maintenance, urgent incidents, or if the requirements of the project demand. (D)

Further Information
Please note that job descriptions cannot be exhaustive, and the post-holder may be required to undertake other duties, which are broadly in line with the above key responsibilities.

This role is full time and 1-year fixed term with potential for extension (subject to probation period).

If you require any further details about the role, please contact Viktor Schlegel, Deputy Programme Director, at *************

Questions about the recruitment process should go to HR at Imperial Global Singapore: *************

Imperial Global Singapore is committed to Imperial’s equality and diversity frameworks. Our values are at the root of everything we do and everyone in our community is expected to demonstrate Imperial:

• Respect

• Collaboration

• Excellence

• Integrity

• Innovation

Employees are also required to comply with all Imperial Global Singapore’s policies and regulations.

Imperial Global Singapore is committed to equality of opportunity and to eliminating discrimination. All employees are expected to:

1. Champion a positive approach to change and opportunity

2. Encourage inclusive participation and eliminate discrimination

3. Communicate regularly and effectively within and across teams

4. Consider the thoughts and expectations of others

5. Deliver positive outcomes

6. Develop and grow skills and expertise

7. Work in a planned and managed way

Employees are also required to comply with all IGS policies and regulations, paying special attention to:

• Confidentiality

• Conflict of Interest

• Data Protection

• Equal Opportunities

• Financial Regulations

• Health and Safety

• Information Technology

• Smoking

• Private Engagements and Register of Interests

• The regulations of CREATE Tower and of Singapore

They must also undertake specific training and assume responsibility for safety relevant to specific roles, as set out on the College Website Health and Safety Structure and Responsibilities page.

IGS observes the San Francisco Declaration on Research Assessment (DORA), which means that in hiring and promotion decisions, we evaluate applicants on the quality of their work, not the journal impact factor where it is published.

IGS believes that the use of animals in research is vital to improve human and animal health and welfare. Animals may only be used in research programmes where their use is shown to be necessary for developing new treatments and making medical advances. IGS is committed to ensuring that, in cases where this research is deemed essential, animals are treated with full respect, and that any and all staff involved with this work show due consideration at every level.

For further details, applicants are directed to: *************