Tech – Cybersecurity Engineer: Secure-by-Design: Threat Modelling

Important

Interested in this project? When applying, remember to indicate the Project Title as listed above in the application form.

Role

Cybersecurity Engineer

Division

Economic & National Development

Level

Undergraduate, Polytechnic Student

Internship Duration

3 months, 6 months

Project Description

Interested in this project?

Submit your application and indicate this project as your preference.

Apply Now!

Back to Cybersecurity Engineer listings

ACRA operates digital services such as Bizfile, which support the registration, filing and access of business information in Singapore. As ACRA continues to modernise its technology platforms, cybersecurity must be designed into these systems from the outset. In this project, the intern will work alongside ACRA’s cybersecurity team on real government digital systems, performing threat modelling and security architecture assessments. This includes analysing system architecture, applications, data flows and trust boundaries to identify potential cyber threats, attack paths and security gaps. The intern will also assess how cybersecurity controls are implemented across ACRA systems and recommend opportunities to strengthen security architecture and control design. A key outcome of the internship will be to contribute to an ACRA System Security Architecture and Control Blueprint — a reusable secure-by-design baseline that can guide ACRA systems across different technology and cloud environments. The project offers practical exposure to threat modelling, security architecture, cloud security and cybersecurity controls, with the intern’s work contributing directly to strengthening the security and cyber resilience of ACRA’s digital services.

Learning Outcomes

Threat Modelling: Gain hands-on experience performing structured threat modelling on real-world digital systems by analysing system components, data flows, trust boundaries, attack surfaces and potential cyber threats. Security Architecture: Learn how to review application, infrastructure and cloud security architectures, identify security gaps and translate cybersecurity risks into practical architectural and technical safeguards. Cloud Security: Develop practical understanding of how cybersecurity controls are implemented in modern cloud environments, including areas such as identity and access management, network security, data protection, logging and monitoring. Cybersecurity Control Assessment: Learn to interpret cybersecurity requirements and map IM8 Reform security controls to system architectures, assess their implementation and identify potential control or design gaps. Secure-by-Design Engineering: Learn how security requirements, threat scenarios and architectural controls can be translated into reusable security architecture patterns and control blueprints that support secure-by-design development across multiple systems.

Prerequisites

- Currently pursuing a degree or diploma in Cybersecurity, Computer Science, Information Systems, Computer Engineering or a related technical discipline. - Good understanding of fundamental cybersecurity concepts, including network security, authentication and access control, application security and common cyber threats. - Ability to understand, or willingness to learn how to interpret, system architecture diagrams, network diagrams and application/data flows. - Strong analytical and problem-solving skills, with the ability to document technical findings and communicate them clearly. - Knowledge of threat modelling, cloud security, security architecture or cybersecurity frameworks and controls will be an advantage.