ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust as an integrated engineering group, spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange. Join our Cyber Team We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers. Job Overview: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Autonomous Threat Triage & Verification</li> </ul> Design and build autonomous, search-augmented multi-agent orchestrator (e.g., Ideator-Critic-Scorer workflows) that instantly activates upon alert triggers to autonomously investigate and determine validity and authenticity of an anomaly/alert. <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Vulnerability Discovery & Protocol Analysis</li> </ul> Utilize intelligent agents to analyse 5G/6G protocol stacks, correlating N2, N11, and user-plane interfaces to systematically identify architectural flaws, signalling exploits (such as SIM cloning), and network-initiated detachment vulnerabilities. <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Implement real-time correlation & threat detection</li> </ul> Develop agentic tools leveraging deep log analysis and packet inspection (e.g., tshark/Wireshark) to correlate real-time telemetry from 5G UPF/AMF interfaces and automatically enrich security playbooks via high-precision GraphRAG systems. Job Requirements: Agentic AI & LLM Orchestration: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Expert-level proficiency with multi-agent orchestration frameworks (LangGraph, smolagents, OpenClaw) and local LLM runtime deployment engines (Ollama, llama.cpp, vLLM) using state-of-the-art open models like Qwen.</li> </ul> 5G/6G Core Architecture & Networking: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Deep domain expertise in 5G cellular infrastructure (Open5GS, UERANSIM), protocol analysis, packet enrichment (IMSI/IMEI correlation), and software-defined network management.</li> </ul> Cybersecurity & Reverse Engineering: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Advanced skills in 5G attack/detection methodologies, binary decompilation (leveraging automated Ghidra workflows combined with LLMs), malware analysis, and security telemetry platforms (Keysight VisionX, Graylog).</li> </ul> Systems & Cloud Computing: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:#1d2d3e">Hands-on experience with telco-grade cloud infrastructures (StarlingX, OpenStack, Kubernetes, Proxmox) and containerized microservice architectures using FastAPI, WebSockets, and JSON Schema lifecycle automation.</li> </ul> Preferred Qualifications: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Proven track record of engineering prototype development and hands-on system architecture in advanced networking or cybersecurity domain areas.</li> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Demonstrated ability to rapidly prototype complex custom controllers, secure stackable filesystems, or hardware-in-the-loop testbeds (e.g., Raspberry Pi-based 5G setups).</li> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">A passion for continuous learning, bridging deep academic research with hands-on systems engineering.</li> </ul> Soft Skills: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0pt;margin-bottom:4.0pt;vertical-align:middle;color:#1d2d3e">Strong communication skills to collaborate with cross-functional teams (frontend, QA, network engineers).</li> </ul> Work Location: Jurong East Find out more: <a href="https://www.stengg.com/cybersecurity">https://www.stengg.com/cybersecurity</a> ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Principal AI Security Engineer (5G Networks)(DSC|SN) (ST Engineering Jurong East Bui, SG) @ ST Engineering

About this role

Ready to apply?