Cyber Security Vulnerability Researcher (Cloud Platform)

Centre for Strategic Infocomm Technologies (CSIT); Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Careers seeks a security researcher to investigate threats across cloud and hypervisor platforms, assess security architectures, and identify authentication or authorization weaknesses.

You will design remedies and contribute to R&D efforts to strengthen protection against data loss, malware, and integrity issues in guest VMs and infrastructure, with opportunities for both senior and entry-level applicants.

Qualifications

• A degree or professional qualification in Infocomm Security, Computer Science, Computer/Electrical Engineering, Information Technology.
• Strong interest and passion for Infocomm security.
• Strong problem-solving and troubleshooting skills.
• Creative, innovative, self-motivated and independent.
• Knowledge in Python, ESXi/Azure and other cloud platforms, C/C programming and Assembly would be an added advantage.

Responsibilities

• Investigate threats and assess the impact on cloud and hypervisor platforms.
• Conduct research to understand security architecture in these systems and services.
• Perform security assessments to identify authentication or authorization problems and demonstrate how they could be abused.
• Assess protection gaps for data loss/theft, malware spread within guest VMs/tenants and at infrastructure level.
• Design and demonstrate remedies for found problems.
• Research and create solutions to improve effectiveness/efficiency of R&D work.

Skills

Infocomm security

Problem solving

Troubleshooting

Creativity

Self-motivation

Independent work

Python

C/C++

Assembly

Cloud platforms (Azure, ESXi)

Education

Degree in Infocomm Security or related field

Tools

Python

ESXi/Azure

C/C++

Assembly

Job description

Job Scope

• Investigate threats and assess the impact on cloud and hypervisor platforms
• Conduct research to gain in-depth understanding of the security architecture in these systems and services
• Perform security assessments to identify authentication or authorization problems in these systems/services and demonstrate how they could be abused
• Perform security assessments to identify potential protection gaps for issues such as loss of integrity or theft of data and credentials, malware spread within guest VMs/tenants and at infrastructure-level, should a network be compromised by malware (e.g. ransomware)
• Design and demonstrate effective remedies for found problems
• Research and create solutions for improving the effectiveness and/or efficiency of conducting such R\&D work

Requirements

• A degree or professional qualification in Infocomm Security, Computer Science, Computer/Electrical Engineering, Information Technology
• Strong interest and passion for the field of Infocomm security
• Strong problem-solving and troubleshooting skills
• Creative, innovative, self-motivated and independent
• Knowledge in Python, ESXi/Azure and other cloud platforms, C/C programming and Assembly would be an added advantage
• Senior and entry-level positions available

As CSIT is an agency under the Ministry of Defence (Singapore), only Singapore Citizens will be considered.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans.