{"id":3322781,"url":"https://alion.io/job/imperialcollege-cybersecurity-researcher","title":"Cybersecurity Researcher","company":{"id":38321,"name":"Imperial College London","domain":"imperial.ac.uk","url":"https://alion.io/company/imperialcollege","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":6000,"max":12000,"currency":"SGD","period":"month","gross":true,"usd_annual":112428},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Red Teaming","optional":false},{"name":"DICOM","optional":true},{"name":"FHIR","optional":true},{"name":"HL7","optional":true},{"name":"ISO 14971","optional":true},{"name":"ISO 27001","optional":true},{"name":"Linux","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Python","optional":true},{"name":"Rust","optional":true}],"status":"live","first_seen_at":"2026-10-27T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-27T00:00:00Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Research Programme\nOur mission is simple to summarise: make Singapore's healthcare ecosystem measurably harder to attack. We are looking for talented and driven people who will work with us on this mission by finding real weaknesses, building real defenses and see them through to fixes that protect patients, hospitals, and the devices they depend on.\nImperial College London and Nanyang Technological University (NTU) are seeking a hands-on Cybersecurity Researcher to join IN-CYPHER (Imperial/NTU CYber Protection for HEalthcaRe). IN-CYPHER is a UK–Singapore research programme on the security of connected medical devices and healthcare systems, based at Imperial Global Singapore (IGS).\n\nPurpose of the Post\nConnected medical devices often stay in service for 10–20 years, are hard to patch, and sit inside complex hospital networks. We want someone who knows how these systems are broken and how they are defended, and who can turn that skill into lasting impact through research, vulnerability disclosure, tooling, and work with clinical and industry partners.\nWe welcome candidates whose strengths lie in any of the following areas:\n· Red team: penetration testing, vulnerability research, and exploit development, with a record of reported CVEs or published exploits/PoCs.\n· Blue team: detection engineering, network monitoring, intrusion and anomaly detection, and incident response, with evidence such as tools, detection pipelines, or deployed infrastructure.\n· Yellow team: building the environments others attack and defend, such as cyber ranges, testbeds, vulnerable-by-design systems, and emulation or simulation infrastructure, with evidence of systems you have built.\nPrior medical-domain experience is welcome but not required. You will work closely with clinical and engineering partners at Imperial, NTU, the Lee Kong Chian School of Medicine, and Imperial College Healthcare NHS Trust.\nCandidates will be employed by Imperial Global Singapore, a research division of Imperial College London, which is consistently ranked within the top 10 of the QS University Rankings. \nThe position is based at the Imperial Global Singapore office located in the CREATE building on the NUS campus. The Cybersecurity Researcher will join a vibrant cross-faculty interdisciplinary research environment currently hosting approximately 30 researchers working across 5 major programmes. \n\nKey Responsibilities\nMain Duties\nPlan and lead your own research on the offensive and/or defensive security of connected medical devices and healthcare networks.\nDrive research outputs through to concrete protective impact in Singapore's healthcare sector, such as disclosed and remediated vulnerabilities, deployed detection tooling, and guidance adopted by clinical and industry partners.\nConduct security assessments, vulnerability research, and penetration tests on medical devices, protocols, and hospital-like systems, following responsible-disclosure practice.\nDesign, build, and maintain testbeds and attack/defence infrastructure for the programme, such as a medical-device cyber range.\nDevelop and evaluate detection and anomaly-detection techniques for network traffic and device data flows.\nCoordinate responsible disclosure with manufacturers and relevant authorities where vulnerabilities are found.\nPublish in high-quality refereed venues and present at academic and practitioner conferences.\nDevelop contacts and collaborations within IGS, Imperial, NTU, and the wider community.\nPromote the positive reputation of IGS and the IN-CYPHER Programme.\nContribute to grant proposals, programme activities, and the smooth running of IN-CYPHER and other programmes under IGS.\nAssist in the supervision of undergraduate interns, postgraduate research students, and research assistants as required.\nMaintain organised, accurate records and the highest standards of scientific integrity and confidentiality.\nComply with IGS and CREATE practices and attend safety courses where appropriate.\nAny other duties as may be deemed reasonable by scientific and operations managers of IGS, IN-CYPHER, and scientific investigators of the relevant Themes.\nOther Duties\nUndertake any necessary training and/or development\nUndertake appropriate administration tasks\nAttend relevant meetings\nObserve and comply with all IGS policies and regulations, including the key policies and procedures on:\nConfidentiality\nConflict of Interest\nBusiness Continuity\nData Protection\nEqual Opportunities\nEthics related to scientific conduct and to considerations of patient data, where appropriate\nExternal Interests\nFinancial Regulations\nHealth and Safety\nUse of Information Technology\nPolicies regarding smoking and e-cigarettes\nUndertake specific safety responsibilities relevant to individual roles, as set out by IGS\nPerson Specification\nRequirements\nCandidates/post holders will be expected to demonstrate the following: Essential (E)/ Desirable (D)\nEducation\nPhD (or equivalent industrial experience) in computer science, engineering, applied mathematics, or a closely related discipline. (E)\n\nFor a senior appointment: 2–5 years of post-doctoral or equivalent experience in security or a field allied to one of the IN-CYPHER themes. (E)\nKnowledge & Experience\nSolid understanding of attack techniques and defensive controls across network, system, and application layers, for example MITRE ATT&CK. (E)\nFluency in at least one language used for security tooling and analysis, such as Python, C, Go, or Rust. (E)\nKnowledge of research methods and of how to evaluate security techniques rigorously. (E)\nKnowledge of embedded, IoT, or wireless security, or of ML-based anomaly detection. (D)\nA demonstrable, verifiable track record in at least one of the following: (E)\nRed team: credited CVEs, published exploits or PoCs, or bug-bounty disclosures.\nBlue team: detection tools, rulesets, monitoring pipelines, or incident-response work you built or led.\nYellow team: testbeds, cyber ranges, or attack/defence infrastructure you designed and built.\nPractical experience in network security, including protocol analysis, traffic capture, and network-level attack or defence. (E)\nResearch outputs such as refereed publications, conference or practitioner talks, or substantial open-source security tooling. (E)\nExperience in the analysis, interpretation, and visualisation of data, for example network traffic or security telemetry. (E)\nExperience with medical devices or healthcare systems, for example HL7 FHIR, DICOM, BLE/wireless medical devices, or hospital IT environments. (D)\nIndustrial security experience, such as consultancy, a red team, or a SOC. (D)\nRelevant certifications, such as OSCP, OSEP, OSWE, CRTO, or GIAC. (D)\nFamiliarity with security standards and regulation, such as ISO 27001, NIST SP 800-53/800-30, IEC 62443, IEC 81001-5-1, ISO 14971, or medical-device cybersecurity guidance. (D)\nStrong Linux system administration, virtualisation, and networking skills. (D)\nExperience supervising students or interns. (D)\nSkills & Abilities \nAbility to review recent literature, develop and apply new concepts, and solve problems creatively. (E)\nExcellent written and verbal communication, including writing for scientific publication and for disclosure to vendors. (E)\nAbility to collaborate within a large, distributed, interdisciplinary team, potentially across time zones. (E)\nAbility to direct and motivate a small research team. (E)\nUnquestionable integrity and commitment to ethical and legal conduct in security research, including responsible disclosure. (E)\nDiscipline and regard for confidentiality and security at all times. (E)\nWillingness to work as part of a team, to be open-minded and cooperative, and to undertake any necessary training for the role. (E)\nA flexible attitude towards work. (E)\nWillingness to travel within Singapore, to the United Kingdom, and to other destinations as required to conduct and disseminate research. (D)\nWillingness to work outside normal working hours (including weekends) if the requirements of the project demand. (D)\n\nFurther Information\nPlease note that job descriptions cannot be exhaustive, and the post-holder may be required to undertake other duties, which are broadly in line with the above key responsibilities.\nImperial Global Singapore is committed to Imperial’s equality and diversity frameworks. Our values are at the root of everything we do and everyone in our community is expected to demonstrate Imperial:\n· Respect\n· Collaboration\n· Excellence\n· Integrity\n· Innovation\nEmployees are also required to comply with all Imperial Global Singapore’s policies and regulations.\nImperial Global Singapore is committed to equality of opportunity and to eliminating discrimination. All employees are expected to:\nChampion a positive approach to change and opportunity\nEncourage inclusive participation and eliminate discrimination\nCommunicate regularly and effectively within and across teams\nConsider the thoughts and expectations of others\nDeliver positive outcomes\nDevelop and grow skills and expertise\nWork in a planned and managed way\nEmployees are also required to comply with all IGS policies and regulations, paying special attention to:\nConfidentiality\nConflict of Interest\nData Protection\nEqual Opportunities\nFinancial Regulations\nHealth and Safety\nInformation Technology\nSmoking\nPrivate Engagements and Register of Interests\nThe regulations of CREATE Tower and of Singapore\nThey must also undertake specific training and assume responsibility for safety relevant to specific roles, as set out on the College Website Health and Safety Structure and Responsibilities page.\nIGS observes the San Francisco Declaration on Research Assessment (DORA), which means that in hiring and promotion decisions, we evaluate applicants on the quality of their work, not the journal impact factor where it is published.\nIGS believes that the use of animals in research is vital to improve human and animal health and welfare. Animals may only be used in research programmes where their use is shown to be necessary for developing new treatments and making medical advances. IGS is committed to ensuring that, in cases where this research is deemed essential, animals are treated with full respect, and that any and all staff involved with this work show due consideration at every level. For further details, applicants are directed to: https://www.imperial.ac.uk/research-and-innovation/about-imperial-research/research-integrity-investigations/ethics/animal/\nSkills\nMedical Systems, Security Assessments, Design, Vulnerability Research, Defence Sector, Protocol, Design-Build, Medical Devices, Cybersecurity, Network Intrusion Detection And Prevention, Network Security","description_format":"text","description_chars":10708,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Education","Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-10-27T08:31:40Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":21,"reasons":["seen:2","velocity","win:early","comp:junior"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":112428,"is_top_pay":true},"html_url":"https://alion.io/job/imperialcollege-cybersecurity-researcher","json_url":"https://alion.io/job/imperialcollege-cybersecurity-researcher.json","meta":{"generated_at":"2026-10-29T16:10:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24114,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":38321},"rest":"https://alion.io/mcp/rest/get_company?id=38321"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fimperialcollege-cybersecurity-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fimperialcollege-cybersecurity-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fimperialcollege-cybersecurity-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/imperialcollege-cybersecurity-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fimperialcollege-cybersecurity-researcher"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3322781}},{"tool":"search_jobs","arguments":{"company":"imperial.ac.uk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3322781},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}