Cybersecurity Incident Simulation Intern

Synapxe; Singapore; On-site; Full time

Job description

Join Synapxe as an intern and see how you can contribute in powering a healthier Singapore. Internship@Synapxe is where curiosity meets impact! You would be able to gain practical experience, hone your skills, and be part of meaningful work that improves health through technology!

Public Healthcare entities are required to participate in cybersecurity exercises annually to exercise the processes established in relevant plans including, but not limited to Cybersecurity Incident Response Plans, Business Continuity Plans, Disaster Recovery Plans, etc; and coordination and collaboration between interdependent entities; in order to ensure continuity of essential services in our Public Healthcare Institutions in the event of a cybersecurity incident.

Interns on this project will join our Project Management Team to plan, organise and coordinate the delivery of the cybersecurity exercise. In the process of managing this project, the intern will learn how theoretical knowledge of cybersecurity in an academic environment can be practically applied in Singapore’s Public Healthcare ecosystem. This can be achieved when the interns interact with various stakeholders identified in the relevant plans – to discuss various scenarios that can lead to a cybersecurity incident; possible impacts and the resulting disruptions in each of these scenarios; and expected responses to mitigate the risk arising from such scenarios.

In addition to the opportunity to observe an incident lifecycle from end to end, the interns will also gain hands‑on experience in the process of scenario design, exercise delivery and post‑exercise learning. This is akin to the process of game development where the goals are established, challenges designed and issued to the players as well as identifying lessons learnt in order to facilitate better team performance should the need arise.

This project will help the interns put the various modules they’ve learnt about cybersecurity in perspective holistically. Interns with experience in exercises during National Service, either as participants or as part of the Exercise Planning/Control Team, will have an advantage but any other interns with wit and good knowledge of the Cyber Kill‑Chain will also be suitable.

Objectives For The Intern(s)

• To learn about the processes required in response to a cybersecurity incident;
• To learn about stakeholder engagement;
• To experience the steps required in the design and conduct of an exercise as well as the identification of lessons learnt.

The Selected Intern(s) Will Assist In Following

• Facilitate stakeholder engagement during the scenario design, exercise delivery and post‑exercise reporting phases;
• Organise, coordinate and facilitate workshops required for the design of scenarios, delivery of injects and identification of lessons learnt;
• Support the preparations, setup and disassembly of the exercise environment;
• Support the delivery of exercise injects;
• Facilitate the consolidation of lessons learnt.

About You

• Undergraduate currently in Year 2 or Year 3, pursuing a degree in Business Analytics, Computer Science, Cyber/IT Security, Information Systems, Information Engineering and Media, or a related discipline;
• Possesses knowledge of Cyber Kill‑Chain and the NIST Framework;
• Awareness of the Cyber Security Act 2018, Regulations and National Cyber Incident Response Framework (NCIRF);
• Possesses strong analytical skills & wit;
• Good team player with strong communication skills with project teams, stakeholders, senior management and contractors including both technical and non‑technical personnel;
• Independent, fast‑learner and self‑driven;
• Good team player with strong analytical and communication skills;
• Ability to multitask and work effectively as part of a multidisciplinary team;
• Passionate and keen to make a difference to re‑imagine the future of HealthTech.