How to get into research jobs after working in corporate technical jobs I am Performance and Automation Testing engineer who recently moved into IT Security in Singapore. I hold a BSc in software system (full-time) and MSc in IT (distance learning program). I have 9+ years experience working in Testing projects where major contribution was into Performance and Automaton testing.  

I wish to get into research jobs (specifically, academic research). I am looking for opportunities any place however my preference will be Germany, Singapore and USA. However whenever I have approached universities they aren't willing to consider me, stating that I don't have any research experience. 

Can anyone help me with path to get into IT Security Research. I guess attending a part-time/full-time masters program (IT/INFOSEC) followed by PhD (INFOSEC) program should help. Is this an appropriate path? Will this suffice to give me a chance at getting hired into an academic research job?
By Academic Research, I assume you mean Phd. 

So, I am aware of cases where people chose to move back from industry to academia. A Phd student that I know, used to work for EA, and after 3 (or 5 years) of working as a programmer he switched to academia to the field of Computer Networks to pursue his Phd. 

So basically, there is the possibility of getting to such a position directly from the industry even if you have worked on completely unrelated stuff. However, any professor from a medium - top ranked program in the academia will look at you research capabilities in order to accept you as a Phd student. 

What I would do in this case, is to create a strategy to achieve the goal. First be realistic with what you really have in hand to offer. What are your pros/cons compared to any other Phd student that want to apply to a given program. 

Define your target universities. Maybe you should do some research and look where is deficiency of Phd students. In which country people look less interested to pursue a Phd. 

Then look at the specific program that you want to apply for. If you don't have a preferred topic, I suggest that you should apply in a place where your experience will give you the upper hand in the application process. 

You say you are interested in the IT security research. Do you like the applicative side or the theoretical stuff (crypto)?

I think there are many variables that may affect your application. The fact that you hold a Masters degree from a distance program, maybe your age, and the fact that you want to switch to a completely new topic (academic-wise, assuming that your Master studies were not related to IT security) are the downsides. But, don't be discouraged, give it a try. 

I would target the mid to low ranked programmes and send applications around.

Good luck!