Singapore Economic Development Board (EDB)
Cybersecurity Specialist (Penetration Testing) Traineeship [GRIT@Gov]
[What the role is]
About GovTechThe Government Technology Agency (GovTech) is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.
At GovTech, we offer you a purposeful career to make lives better. We empower our people to master their craft through continuous and robust learning and development opportunities all year round. Our GovTechies embody our Agile, Bold and Collaborative values to deliver impactful solutions.
GovTech aims to transform the delivery of Government digital services by taking an "outside-in" view, putting citizens and businesses at the heart of everything we do.
Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!
Learn more about GovTech at tech.gov.sg.
[What you will be working on]
About the Role
We are seeking a Cybersecurity Specialist (Penetration Testing) Trainee to join GovTech's Cybersecurity Group as part of our Vulnerability Assessment & Penetration Testing (VAPT) team. This traineeship programme is designed for fresh graduates or early-career professionals who are passionate about cybersecurity and want to develop expertise in penetration testing and adversary simulation. You will be part of a team that helps protect Singapore's government assets from cyberattacks whilst gaining hands-on experience in cutting-edge cybersecurity practices.
As a trainee, you will receive comprehensive training and mentorship whilst contributing to real-world cybersecurity assessments. You will have opportunities to work on diverse projects spanning infrastructure security, web and mobile application testing, cloud security assessments, and adversary simulation exercises. This dynamic environment will help you quickly assimilate knowledge in emerging technologies and cybersecurity trends aligned with Singapore's Smart Nation initiatives.
What You’ll Expect
Gain in-depth knowledge of common and advanced tactics, techniques, and procedures (TTPs) used by cyber adversaries
Develop hands-on experience with cutting-edge technology stacks including Terraform, cloud platforms, Kubernetes, and Infrastructure as Code (IaC)
Work with modern security tools, automation frameworks, and penetration testing platforms
Interact with international security researchers and ethical hackers through bug bounty programme management
Research emerging penetration testing and adversary simulation methodologies
Key Responsibilities:
Learn to conduct VAPT across IT systems, networks, web applications, mobile applications, and cloud deployments under supervision
Assist in vulnerability triage and analysis of security findings from various sources including bug bounty programmes
Support the team in conducting targeted Adversary Simulations (AS) and learning advanced attack techniques
Develop documentation skills by producing findings reports, impact analyses, and remediation guidelines
Participate in stakeholder presentations and learn to communicate technical findings effectively
Build automation tools using Python or C# to streamline security operations and testing processes
[What we are looking for]
Required Qualifications:
Degree in Information Security, Computer Science/Engineering, Information Technology, or equivalent
Proficient in at least one programming language (Python, C#, or JavaScript preferred)
Comfortable with PowerShell and bash scripting
Strong problem-solving skills and analytical mindset
Good communication abilities and enthusiasm to learn
Curiosity about cybersecurity, ethical hacking, and emerging threats
