With the increasing prevalence of cyber attacks, more and more companies are looking into hiring professionals to keep their information safe. Cybersecurity is certainly financially lucrative but these professionals are not doing it just for the paycheck. We speak to Keith, who shares with us his recent experience as an Incident Responder- drawing parallels to a firefighter, and the immense value his role brings to the company. In addition, we have Keith’s mentor, Liyana Fauzi, from the Strategic Planning and International Division to share with us how her GovTech journey has helped in her mentorship with Keith.
Why did you join GovTech’s Technology Associate Programme?
Before I graduated, I was actively looking for a job in the Cyber Security technical field. One distinct reason on why I applied to GovTech’s TAP was the programme’s structure. I personally felt that the programme was well crafted for fresh graduates who wanted to develop a career in the IT industry. The programme encourages rotation, a mentor to guide you and offers several job roles to select from to kick-start your career.
Describe a typical working day at GovTech
I am an Incident Responder in the Cyber Security Operations team. What that basically means is that, my role is comparable to the functionality of a firefighter when a fire breaks out. The firefighter will be alerted of the incident immediately and tasked to contain the fire. They will then need to remediate the issue, provide root cause analysis on how the fire started as well as recommendations on how to prevent such a situation from happening in future. When the firefighters are not reacting to incidents, they will be at the station finding means to increase their skills or sharpen the tools they have.
This is similar to the reactive and proactive role as an Incident Responder. When a cyber-security incident occurs, we will be there to perform both forensic/memory image on the system and bring it back for further analysis.
My typical workday typically consists of these 3 fundamental roles- malware analyst, data/log analyst and incident response. Malware analysis involves examining malicious scripts/executables and determine what are its capabilities. This could involve reverse-engineering an executable in assembly language. In addition, as a data/log analyst, I am involved in analysing the huge amount of raw data from network, application and database logs. In order to understand how the incident happened over the network, I have to correlate the data from multiple sources and make sense of what the adversary was trying to perform. Lastly, for incident response, I work as an incident Handler for security events.
As a proactive individual, I am always finding ways to reduce the time taken for investigation either by automating the investigation process or by looking for new tools out in the market which could aid in investigation.
However, GovTech is not all about work; till date I was involved in many other exciting events such as being part of the planning committee for Cyber Security Group (CSG). I also had the opportunity to participate in GovTech’s Dinner and Dance performance which gave me the opportunity to make a lot of wonderful friends from the different departments. My team also makes an effort every once in a month to head out and enjoy ourselves with activities like bowling, badminton, dinners and drinks, and many more!
Talk about the technical skills you have been working on at TAP?
Since my time here in GovTech, I have been exposed to various technical skills such as reverse engineering, data analytics and scripting. For reverse engineering, my role as a malware analyst is to understand the capabilities of a malware. This involves looking at assembly codes, understanding different API calls or even looking at malicious scripts/programs. In data analytics, there are countless opportunities to work on big data. I picked up numerous pre-processing techniques and analytical skills such as R, Python, Splunk, Tableau. As for scripting, I am continuously improving on our investigation tools as well as scripting languages such as Python, bash or Powershell.
What do you enjoy the most about working for GovTech?
As we are the “firefighters” for the Whole-of-Government, the investigation we perform is for the government. By solving incidents, I get a sense of satisfaction as I am ensuring a safer environment for us to work in.
What is the one advice you would give to those considering applying for the TAP programme?
If you’re looking for a quick and challenging environment, GovTech will be the place for you. A personal advice on what I tell my juniors is that as a fresh graduate entering into the IT industry, there are just too many different roles. You will not know if the role suits you unless you try it out. Look for an organization which offers you the opportunity for rotation so you can grow as an individual.
Share one key takeaway from the TAP programme
As part of TAP, we are each paired with a mentor who is more senior in the organisation. My mentor, Liyana has guided me through my times here in GovTech. She ensured that I understood the organisation structure, check in if there were any challenges faced and asking if I needed any help that she can help with. It is really heartwarming to have an awesome mentor.
Liyana, share with us your mentorship experience with Keith.
I was matched with Keith and another mentee through a fun matchmaking/interview session. As Keith and I are from different teams in GovTech, I saw my role as a mentor in general work matters, and not so much the technicalities of his domain area. This mentorship experience enabled me to reflect upon how it was for me when I first joined the then-IDA as a relatively fresh grad too, and to try to pick out some of the lessons I’ve learnt along the way since then; things that I could share with Keith. I have tried to keep the mentorship experience pretty light and to provide an open space for candid discussions. We would typically meet over coffee to talk about how he’s doing at work, what’s happening with the organisation (given that there have been many changes), and to also share my experience in navigating the workplace such as how to manage stakeholders or how my mentees could meet their meet career aspirations.
How has your GovTech journey helped your mentorship with Keith?
What helped me in my mentorship was mainly (a) things I picked up from other seniors, (b) having gone through certain GovTech programmes and (c) forging friendships with other mentors. For example, one piece of workplace advice that I hold closely is not to be afraid to ask and actively pursue opportunities that one was interested in. This piece of advice was lent to me by another senior and it is something I share with my mentees too, and I think it could be useful for the TAPs who are just starting out at work. Programmes that I had completed in my GovTech journey such as the EDGE Programme and the Sectoral Inter-agency Projects have also provided me with some insight into what the other agencies are doing, how agencies view GovTech’s work and how to manage cross-agency issues. To me, it is important for my mentees to know how their work has impact on other agencies’. In addition, as all mentors had to go through a two-day course, the friendships I developed with other mentors has also been very helpful in this journey as we could exchange ideas about topics to discuss with our own individual mentees.
Are you an advocate of the innovative use of technology and how it can enhance the lives of fellow Singaporeans? GovTech Technology Associate Programme (TAP) could be a place for you to start. TAP is an exclusive leadership trainee programme carefully crafted to develop and hone your technical knowledge and professional skills. Upon selection, you’ll participate in 24 months of specialist training and grooming to take on technical roles within GovTech that will accelerate your career development.
Make an impact on the future of technology; join now by applying to the GovTech Technology Associate Programme. You can find out more about GovTech Technology Associate Programme here.