Momentum Z is a Singapore Cybersecurity firm spun off from a Defense company in Singapore. Our vision is to provide an enterprise-grade solution to every company, with the vision to raise the level of cyber security and compliance in Singapore.

Our products and services include:

• Red Teaming
• VAPT (Vulnerability Assessment and Penetration Testing)
• vCISO (or CISO advisory)
• Cyber Threat Intelligence
• Data Protection Product (DPP)
• Cyber Education

Project: Project INTELNET

The project comprises 40% application and 60% research, where Trainees can explore new areas by reading up different domains of the operation, coming up with hypotheses, and performing proof of concept. It is very suitable for those who wish to work in an unconventional cybersecurity lab. Trainees will be expected to perform assessments, not just VAPT but also on protocol-level security assessment. While Trainees need not have prior knowledge of the environment, they can expect to complete some work of an analyst, researcher, and taking on a white hackers role.

Speardome was established as a Singapore base Centre of Excellence (C.O.E.) by a world leader defense corporation, to focus on top-notch Cyber Artificial Intelligence R&D aligned with the Singapore national Cyber & Data Science strategic development. Speardome will focus on creating innovative solutions and local talent development.

Project: Cybersecurity on SCADA

Trainees can expect to develop means of monitoring activity on Cybersecurity in an OT environment, using IIOT sensors and COTS to triage the origin of attacks. Trainees will need to possess both offensive and defensive skills to identify the vulnerability and conduct penetration to penetrate the system. They can also expect to work out a strategy to harden the system by applying the risk assessment result and propose control measures to address and mitigate vulnerabilities, through developing a mean to monitor and detect the hacking activities via the events collected from the IIOT, IOT sensors and Cybersecurity-related system & network logs.

Cloudsine is an up-and-coming cloud and Cybersecurity technology company headquartered in Singapore that provides consulting services to help customers adopt, secure and innovate in the public cloud such as AWS, Azure or Google Cloud. They also have a unique cloud security product, WebOrion® - it uses patent-pending technologies to provide their clients with a unique set of counter measures against web hackings including defacements, ransomware, DDOS, Blackhat SEOs, etc. Its flagship cloud software, WebOrion®, is used by large enterprises such as Banks, Government, Telcos, and Large Forbes Global 2000 companies spread across Asia such as Australia, Indonesia, India, Philippines, Hong Kong and Singapore.

Project: Cloud Security Engineer- Security Operations, Compliance and Engineering for Cloud Environment (Project STAR)

Project Star is a company-wide security project, where the goal is to help the company obtain a recognized certification as a SaaS provider.

The project involves enhancing information security across the whole organization. This includes security of devices, networks, cloud infrastructure, web security, coding, vulnerability assessment, and other cybersecurity-related activities. In addition, the Trainee will get training related to web and cloud security, and will eventually be part of the team that offers this as professional services to our external customers.

Scantist was founded in 2016 by Nanyang Technology University’s Prof Liu Yang and Prof Srikanthan after their state-of-the-art research yielded the discovery of vulnerabilities in popular commercial and open-source applications recognised via bug-bounties from Apple and Adobe. Scantist’s objective is simple, to translate cutting-edge Cybersecurity research into viable, easy-to-use tools and solutions so that security becomes an enabler – and not a hurdle – in an increasingly technology-dependent world.

Project: Application Security Engine Development

Application security is the biggest threat faced by organisations today. Recent breaches like Solar Winds have brought the issue to the forefront - organisations need to secure not just the software applications they build but also those acquired through vendors, partners, and other sources. Scantist aims at providing state-of-the-art application security tools, leveraging over a decade of R&D that yielded 100+ CVE disclosures impacting Apple, Adobe and many more.

This project focuses on extending and enhancing the Scantist Vulnerability Analysis Engines - based on over 10-years of proprietary research conducted at NTU - to provide pro-active vulnerability management solutions to our clients.

Build software that matters.

InsiderSecurity is an award-winning, homegrown Deep Tech company in Cybersecurity analytics. Large listed enterprises and government are using our products today. We catch cyber threats that are missed by firewalls or antivirus.

Our technology is the first to be accredited by IMDA in User and Entity Behavior Analytics. Our people are included in the ASEAN 40 Under 40 List for our innovative cybersecurity work. We are an awardee on CSA Cybersecurity Innovation Day 2020, for not just one but two categories (the only awardee to do so). We are regularly featured in Channel NewsAsia and TODAY News.

Founded in 2015, we are profitable and growing. Led by cyber warfare experts, we are solving big problems and building the future of Cybersecurity.

Project: Cybersecurity Product Development

As a Trainee, you will develop Cybersecurity products that detect and stop sophisticated threats such as the recent SolarWinds attackers.

Horangi Cyber Security is a Singapore-based CREST-accredited company backed by a team of global cybersecurity experts in Asia and trusted by Industry Leaders such as Gojek, MoneySmart, PropertyGuru and Tiket.com.

Founded by ex-Palantir cybersecurity experts Paul Hadjy and Lee Sult in 2016, Horangi Cyber Security offers the latest product innovation and technology to protect organisations.

Project: Threat Hunting

Candidates can expect to work on a choice of either 1 of the following 2 hands-on research projects where they will be expected to document their findings and possibly have a chance of publishing an official blog post on it:

1. Research an exploit development technique, and where possible, create tooling to automate the process;

2. Research threat hunting methodologies and techniques, and where possible create tooling to automate the detection of 1 type of threat.

Successful candidates will be given guidance on project selection and technical advisory every step of the way during execution.

Attila Cybertech is an Operations Technology (OT) Cybersecurity firm. They secure their clients’ critical assets through a holistic approach with a range of solutions from risk assessments to secured network design, firewall selection, configuration and testing for industrial control systems (such as SCADA, DCS, PLC, RTU) as well as various industrial protocols and process control systems.

Cyber threats are continually evolving. Attila strongly believes that innovation is one of the strategies to mitigate these threats. They seek innovation through internal and external collaboration by sharing ideas, concepts and domain knowledge. In collaboration with their customers, Institutions of Higher Learning (IHL) and Technology Partners, they push the boundaries of cyber technology to develop the most resilient policies and protections for their control systems and operational technology assets.

Project: Operational Technology Cyber Security

As a Trainee, you will join our Cyber Security Team to develop and review security policies and implement real-life cyber security solutions for our clients in the operational technology arena. You will also be involved in system hardening, penetration testing, product development and technical reviews of cybersecurity solutions, servers, network devices etc.

Heron Technology Pte Ltd (Heron) was formerly known as Nova Systems (Singapore) Pte Ltd. The company was founded in February 2017 as a wholly-owned subsidiary of the Australian defence & aerospace company Nova Aerospace Pty Ltd. In June 2021, the company was wholly bought out by its founding Managing Director, Ryan Lee Swee Ann, following the Nova Group's decision to divest its non-defence business in Asia. Heron's current business comprises Cybersecurity and digital aviation technology services.

Project: Establishment of Security Operations Centre-as-a-Service (SOCaaS)

Heron is rolling out SOCaaS services and transforming its Cybersecurity business from mainly consultancy and testing services to end-to-end Cybersecurity services. To roll out Heron's SOCaaS, Trainees can expect to work on establishing a local infrastructure connected to Spectrum's main servers in Europe, customised to local regulatory and customers' requirements.

Protos Labs is a Singapore homegrown startup founded by ex-Booz Allen Cybersecurity consultants. We empower insurers to underwrite cyber risk confidently through advanced cyber risk quantification models and proactive monitoring, enabling them to access new market segments, minimise claims and maximise profits in the US20B cyber insurance market. Our founding team has successfully implemented our technology for large global financial institutions and defence clients. Now, we are taking this know-how to the insurers.

Project: Cyber Risk Intelligence Platform

The Trainee will be attached to the cyber threat intelligence team. He/She will be responsible for identifying potential risks and threats to client organisations. This includes conducting all-source analysis, adversary profiling and research to identify, monitor, and assess threats posed by cyber threat actors to clients. His/her work will feed directly into the advanced risk models developed in the Nexus platform. The Trainee will develop a deep understanding of industry-leading frameworks (e.g., MITRE ATT&CK, Diamond Model Analysis, ACE) and be mentored by threat intelligence experts who have built CTI teams globally.

cysense’s mission is to make good Cybersecurity easy, accessible, and value-adding for businesses around the globe. We are a SaaS product that contextualises tech and policy controls via a risk-based approach to security. The company has venture and angel backing. Started by two INSEAD MBAs and an experienced Silicon Valley entrepreneur, the team has 25+ years’ experience in security, risk management and consulting, and are eager to go fast and grow the company globally.

Project 1: Risk quantification

cysense is looking for Trainees to research and develop a set of models to contextualise and quantify cyber risk in dollar terms. The project will involve researching existing best practices for cyber risk quantification, identifying data sources that can enhance our data models and integrating the data captured by our platform, and provide our clients with unparalleled insight into their cyber posture.

Project 2: Cyber security strategy advisory

cysense is looking for Trainees to develop content for our automated strategy advisory engine. The project will involve researching best practices and regulatory, legal and contractual requirements for our target audience and defining controls that can be implemented to achieve these requirements. Lastly, the project includes developing supporting collateral to make implementing these controls as easy as possible for our clients.

Evie.ai is a venture-backed enterprise (B2B) SaaS startup. We power smarter workplaces with Evie - the Intelligent Assistant for the Intelligent Enterprise. We enable people to partner with AI employees, amplifying human intelligence and creativity to deliver superhuman productivity, unprecedented operational efficiency and new business opportunities.

Project: Security & Privacy Upgrades

Evie is the first of many enterprise AI workers to transform how companies operate. As an enterprise AI Trainee, data security and privacy are fundamental principles. We continually improve our security and privacy posture, and the goal of this project would be to deliver security and privacy upgrades to key systems.

Some examples would be automating vulnerability scanning, simplifying our infrastructure-as-code codebase, and enhancing core systems to reduce data footprint in line with enhanced global privacy laws.

Responsible Cyber Pte. Ltd. is a Singaporean company, and its corporate shareholders include Singtel Innov8 and NUS Enterprise. The company provides cybersecurity as a service, and it is building an amazing cyber platform IMMUNE.

Project: IMMUNE; Cybersecurity Platform

The Trainee will hands-on and be guided to understand Cybersecurity concepts, including attack surface, threats, vulnerabilities etc, and the Cybersecurity NIST baseline. The Trainee will also research current AI implementations in Cybersecurity and create novel AI use cases for Cybersecurity around vulnerability management. The Trainee will also have opportunities to write academic papers in collaboration with other team members.

Silence Laboratories aims to seamlessly secure every interaction across digital worlds or between digital and physical worlds. We have designed multi-factor authentication frameworks which use a fusion of sensing and security algorithms for seamless security and unprecedented user experience. We aim to increase convenience for users by replacing existing tedious authentication methods (TFAs and MFAs) and minimizing user interventions. We have customized our IPs and algorithms to solve problems pertaining to authentication of login attempts to web services, ride-sharing verification, last-mile delivery and localisation.

Project: Enhancing On Chain and Off Chain Multi-Factor Authentication Framework

The project focuses on developing algorithms and support for the in-house seamless authentication framework. Our authenticators would be exploiting different sensing modalities for the intelligent and prudent understanding of context and user behaviour. The project would add robustness and scalability for MFA/TFA solutions deployments.

i-Sprint Technologies Pte Ltd was established in the year 2021, a subsidiary company of i-Sprint Innovations Pte Ltd is a leading provider in Securing Identity and Transactions in the Cyber World that enables individuals, organisations, and societies to build trust and identity assurance for powering productivity gain through digital identity and identity of things (IDoT).

Project: Corporate IT Security Assessment and Monitoring

Trainees will get to work with counterparts locally and overseas to exert sound IT security domain knowledge and assessment skills. They will be expected to work with China counterparts to acquire and utilise technical abilities to assess and monitor security by accessing corporate-wide IT infrastructure resources, comprising both cloud-based and on-premises IT resources.