Libeara – Information and Cyber Security Intern

Libeara is rebuilding capital markets on-chain through its compliance-first approach to tokenising real-world assets. The company is backed by SC Ventures, the innovation arm of Standard Chartered, whose mission is to rewire the DNA of banking.

To date, Libeara’s infrastructure has supported the tokenisation of more than US$1 billion in regulated assets, including the world’s highest-rated tokenised US Treasury fund and Asia’s first tokenised retail money market fund. With multi-chain interoperability and institutional-grade security and governance, Libeara is scaling access to real-world assets the right way: transparent, regulated, and on-chain.

Please visit https://libeara.com to find out more about our company.

Role

We’re looking for an Information and Cyber Security Intern to join our security team and support the day-to-day running of our information and cybersecurity programme. Working alongside the Chief Information Security Officer (CISO) and the Information Security Officer, you’ll get hands-on exposure to how security is run in a regulated fintech. That includes cloud security, identity and access management, vulnerability management, third-party risk, and security certifications such as SOC 2 and ISO 27001.

This is a practical, learning-focused role. You’ll work with Engineering, Product, Legal, Risk and Compliance, and contribute to real projects from day one.

Responsibilities

Information Security and Risk Management

• Assist in maintaining security policies, standards and procedures, and help keep documentation current
• Support security risk assessments by gathering information, updating risk registers and tracking remediation actions
• Help prepare evidence and documentation for SOC 2 and ISO 27001 audits and control assessments
• Support third-party and vendor security assessments, including reviewing questionnaires and client security due diligence requests
• Help develop and deliver cybersecurity awareness content, such as phishing simulations, training materials and internal communications

Security Operations and Incident Management

• Assist in monitoring security alerts and events, and escalate potential issues to the security team
• Support vulnerability scanning, track findings and follow up with owners on remediation
• Help review access rights, privileged access and endpoint security configurations
• Assist in maintaining incident response playbooks and take part in tabletop exercises

Application and Product Security

• Support Engineering in security reviews of applications, APIs and cloud infrastructure
• Help run and triage results from security tools used in the development lifecycle (e.g. SAST, dependency and container scanning)
• Research emerging threats and vulnerabilities, particularly in cloud, blockchain and digital assets, and share findings with the team

Requirements

• Currently pursuing a degree in Information Technology, Computer Science, Engineering, Cybersecurity or a related discipline [or: penultimate/final-year student]
• Basic understanding of cybersecurity concepts such as network security, identity and access management, vulnerability management and incident response
• Interest in or exposure to security frameworks such as ISO 27001, SOC 2 or NIST
• Familiarity with at least one cloud platform (AWS, GCP or Azure) and some scripting ability (e.g. Python, Bash) is a plus
• Entry-level certifications (e.g. CompTIA Security+, ISC2 CC, AWS Cloud Practitioner), CTF participation or personal security projects are a plus
• Strong attention to detail, good written and verbal communication, and eagerness to learn
• Interest in blockchain, digital assets or distributed ledger technology is an advantage
• [Availability for the full internship period / eligibility to work in Singapore]

What You’ll Gain

• Hands-on experience across a full security programme in a regulated, fast-growing fintech
• Direct mentorship from the CISO and the security team
• Exposure to real SOC 2 and ISO 27001 audit and certification work
• Insight into security for blockchain and tokenised real-world assets