Tech – Cybersecurity Engineer: Crowdsourced Vulnerability Discovery Programme

Ever wondered how the Government keeps its digital systems secure against the ever-evolving landscape of cyber threats? The Crowdsourced Vulnerability Discovery Programme (CVDP) is at the forefront of that mission. As part of GovTech's suite of crowdsourced security testing initiatives, CVDP — which includes the Government Bug Bounty Programme (GBBP) — taps on a global community of elite, vetted security researchers to stress-test Government systems and uncover vulnerabilities before the bad actors do. Since 2018, GBBP alone has uncovered over 1,545 vulnerabilities across 175 Government systems, making it a cornerstone of Singapore's Whole-of-Government cybersecurity strategy. With a directive from the Head of Civil Service mandating that all Government internet-facing systems undergo GBBP testing, the programme is scaling rapidly — and that's where you come in. As an intern with the CVDP team, you'll get a rare behind-the-scenes look at how the Singapore Government secures its digital infrastructure at scale. You'll work at the intersection of cybersecurity, programme management, and government policy — helping to coordinate bug bounty runs, engage with government agencies, and contribute to initiatives that have a real and measurable impact on Singapore's cyber resilience. If you're passionate about cybersecurity and want your work to matter beyond the classroom, this is the place to be.